ZachXBT: 18-Year-Old US Hacker Dritan Allegedly Involved in $19 Million Crypto Theft and Money Laundering

On-chain detective ZachXBT has exposed US threat actor Dritan Kapllani Jr., alleging his involvement in social engineering thefts targeting crypto users totaling approximately $19 million.

ZachXBT stated that Dritan has long been flaunting luxury cars, expensive watches, private jets, and nightlife on social media. On April 23, 2026, during a "Band 4 Band (B4B)" voice call on Discord, he publicly displayed an Exodus wallet holding $3.68 million in assets in an attempt to prove he was wealthier than another hacker.

The relevant ETH address is: 0x4487db847db2fc99372a985743a26f46e0b2bba6

ZachXBT's tracking found that this address is linked to a social engineering theft of 185 BTC (approximately $13 million) that occurred on March 14, 2026. The following day, Dritan's Exodus wallet received approximately $5.3 million of those funds. By the time of the B4B call six weeks later, about $1.6 million had been spent or laundered.

US judicial authorities unsealed a criminal indictment against Trenton Johnson on May 11, charging him with participation in the aforementioned 185 BTC theft, for which he faces a potential maximum sentence of 40 years in prison. The "Co-conspirator 1 (CC-1)" identified in the indictment is believed to be Dritan, who has not yet been formally charged.

ZachXBT also noted that Dritan is connected to hacker John Daghita (Lick), who was previously arrested for stealing $46 million from the US government. John had reportedly exposed Dritan's old wallet address on Telegram. On-chain analysis shows that this address is associated with multiple high-confidence social engineering thefts in 2025, with cumulative losses exceeding $5.85 million.

ZachXBT indicated that Dritan has been a long-time active member of the "The Com" hacking circle and had seemingly avoided formal prosecution due to his minor status. Now that he has turned 18, his "borrowed time may finally be coming to an end."