Shieldops Cybersecurity

Licensed Private Investigator & Crypto Recovery Specialist.
Tracking bad actors and reclaiming stolen crypto assets. Real intel. Real results. Contact 👇

[ZachXBT @zachxbt]

1/ An investigation into how Greavys (Malone Iam), Wiz (Veer Chetal), and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple arrests and millions frozen.

[ZachXBT @zachxbt]

1/ An investigation into the opaque private loans/OTC, unilateral vesting changes, market maker coordination, unknown float, and >95% supply control behind $LAB's recent pump to $6B FDV.

Here's why @LABtrade_ represents everything wrong with the current meta of retail extraction on major centralized exchanges.

[ZachXBT @zachxbt]

8/ 226M LAB (large % of float) was deposited to Bitget deposit addresses by insiders in March-April 2026. The deposits sat dormant until 100M LAB was withdrawn a few days ago, which received significant coverage on CT.

An unknown MM operating via Chinese exchanges likely received supply and appears to be running a similar playbook to RIVER, RAVE, SIREN, MYX, SKYAI, etc.

Majority of spot activity seems to originate on Bitget for these manipulated CEX tokens. Binance perps/Alpha and Gate are also used by these entities.

From May 11-12, nearly 100M LAB ($482M) was withdrawn from Bitget to ten addresses:
0x2d81ef9a8c46596d333c1294ae2aaccf61593e5a
0xef80a2b120925c3aa794c6dcfd999fdecbfec01e
0x7db446e489b08f3f33354fc233e0022bc59c4032
0xf05ced86edc1857c977b70728f3c330e9e89b151
0x82fc0bc04c4326b679bf9dbdc60d653062bea31a
0x093eb813f3c7082cd816bbb393ae399586a99335
0x0d95e8d26dd5ca98026970d20c05235a324751d0
0xbcf0771e983af09a67f10812fb336731e4c5d688
0x10e8163d1ef9098e942dbf2d1ff2127a4abf33b9
0x7c62af1a36a24765043cfde72c85bc1203d807b7

Bitget deposit addresses
46M LAB
0x6593aa6c31c88397c37f71259625ec92fe4ee0bf
50M LAB
0xdd77bfbdc11cd37fd255ae35a4ac39df1f9d570a
60M LAB
0xe39f91a0daffc5547ada79a09be30b8556f7dfba
40M LAB
0x77156a0a621d2ac7a075c0ac3172707c2e4aa191
30M LAB
0xd425c56f2eb64646fde7f3c53d7584e60e62fc94

Across LAB since TGE, there have been only a handful of non-insider transfers >$150K. This supports my >95% insider control estimate from earlier.

[ZachXBT @zachxbt]

9/ It seems everyone has private info except retail. Team knows the unlocks, MM knows the positioning, OTC buyers know their cliffs. Retail only sees LAB price.

Call to action for @bitgetglobal, @binance, @gate_io to freeze insider profits and redistribute them to users. Or delist and act earlier without waiting for public pressure.

I put out a $10K bounty for intel earlier and have paid $1.5K so far out of my own pocket.

Note: This is NOT a recommendation to short. With this much supply control, shorts potentially give insiders more fuel to manipulate the price higher.

Last time I posted critique like this, 10+ Chinese KOLs replied with the same script: either paid, have allocation, or airdrop. I expect the same here.

[ZachXBT @zachxbt]

1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders.

Dritan flexes luxury cars, watches, private jets, & clubs all over social media.

Recently he was recorded on a call showing off a wallet with stolen funds.

[ZachXBT @zachxbt]

7/ Dritan lives an extravagant life, regularly posting to Instagram and sharing it with other threat actors on Telegram.

[ZachXBT @zachxbt]

8/ I assisted one of the affected parties for the investigation by uncovering the onchain activity that linked Trenton & Dritan, however held off posting until the charges became public.

Dritan is known within 'The Com' for having lots of plot armor as all of his friend groups (ACG, 41/RM Boyz, etc) have kept getting arrested without him.

I think this is partially due to him having been a minor up until recently since LE typically holds off prosecuting minors.

He just turned 18 so hopefully now his borrowed time is finally up.

[ZachXBT @zachxbt]

1/ The $150M+ DSJ Exchange (DSJEX) / BG Wealth Sharing Ponzi scheme collapsed last week. From April 27 – May 3, illicit actors laundered $92M+ across chains to obscure the trail.

I helped lead an initiative with @Tether_to, @Binance Security Team, @OKX, & US law enforcement that has since frozen $41.5M+.

[ZachXBT @zachxbt]

7/ I performed a timing analysis to find withdrawals and located Solana/Tron deposits to Binance and found matching Tron withdrawals and provided details to relevant parties.

It resulted in $38.4M frozen by Tether on May 4 (yesterday) with another $3.1M+ frozen at various services/exchanges.

[ZachXBT @zachxbt]

8/ While these Chinese investment frauds are obvious to most, they purposely target unsophisticated retail investors via social media.

Reading through victim posts, many still seem to be in denial that they were scammed.

If you are a victim of BG / DSJ I suggest filing a police report in your jurisdiction (US victims: ic3[.]gov).

I rarely investigate Ponzi schemes myself since the cases lack sophistication and the work gets repetitive. This incident caught my attention while I was reviewing USDD contract flows for another case.

The $150M+ figure is likely significantly higher since the scheme has been operating since 2025 with thousands of victim exchange withdrawals identified.

[ZachXBT @zachxbt]

In late 2023, French streamer TeufeurS was extorted for a ransom after a family member was kidnapped in France.

I can finally share that I helped lead efforts that resulted in an ~$800K freeze with the Binance Security team after a $2M ransom was paid.

Six suspects tied to the incident were later arrested. Given the sensitivity of the case, I held off commenting until now.

I have since assisted with asset freezes and identifying culprits in several of the recent France home invasion robberies, and hope to share details in the coming months.

If you or someone you know falls victim, reach out as soon as possible rather than delay.

I prioritize these types of cases as they have grown more frequent amidst this disturbing trend.

[Shieldops Cybersecurity @shield_Business]

Gibbon Take is officially on Kickstarter (pre-launch)!
What started as an idea has turned into something real, and we’re so excited (and a little nervous) to finally share it at this stage.
If you’ve supported us in any way; following, testing, encouraging, Thank you. Seriously.
If you can take one second to click “Notify me on launch,” it helps us so much when we go live: https://t.co/LXgjjt2kwH...
We’re almost there.

[Shieldops Cybersecurity @shield_Business]

Demoing Crumb 'n Get It at #dicetowerwest #boardgames #cookies
https://t.co/n323aSp0aB

[Shieldops Cybersecurity @shield_Business]

Watch me make the art for Crumb 'n Get It - Cookie Card Game. #boardgames #art https://t.co/n323aSosl3

[Tabletopping @tabletoppings]

🃏 Sensu is a small card game with folding fans and very specific maths. Exactly 15, please.
🔗 You can read our review here https://t.co/SO0pXAekd2

#boardgames @dVGiochi

[Jappyjuegos @jappyjuegos]

Juegazo con mayúsculas el Tower up de @Tranjisgames. De lo mejor que llevamos jugado últimamente.

#juegosdemesa #juegosdetablero #bgg #boardgames #partidas #towerup #tranjisgames

[BeyondGaming @BeyondGamingBe]

Review: Beaver Creek: https://t.co/tl3vuv4l2w

#bordspellen #spellenavond #spelplezier #bordspel #dobbelspellen #kaartspellen #familiespel #boardgames #bordspellenreview

[Shieldops Cybersecurity @shield_Business]

Cascadia; a game with no tie-breaker! Why does this feel like a waste of time? Does anyone have a homebrew rule for this?

#cascadia #boardgames

[Shieldops Cybersecurity @shield_Business]

Testing out the Mango Mambo variant of Gibbon Take at #adamcon in Cincinatti.

https://t.co/hNGHD8OB3J

#boardgameconventions #cincinatti #boardgames