Blockchain and crypto investigator ZachXBT discovered a key connection between the infamous criminal William Parker and the Solana-based casino exploit.
ZachXBT's Investigation
ZachXBT used thorough on-chain analysis to identify wallets in trades connected to several accounts. These accounts were based at Binance and additional services like Roobet and Gamdom. William Parker exploited casino games while running phishing activities.
Tracing the Telegram Activity
ZachXBT established the hacker's connection between Telegram activity and the exploited wallet through OSINT techniques. Analysis revealed the hacker's numerous requests for trade assistance regarding GMX. This led to the discovery of a UK phone number associated with the Telegram account, confirming Parker's identity.
Ongoing Investigation and Bybit Hack Overview
The stolen money, primarily transferred through crypto wallets, now rests in an account. The Bybit hack occurred similarly, with infrastructure intrusion. Hackers used social engineering techniques and AWS cloud infrastructure manipulation.
This investigation shows that crypto hackers continue to use complex methods to steal funds, and uncovering their ties to organized crime is crucial.