ZachXBT，真偵探還是偽君子？

Recently, the on-chain crypto detective known as @zachxbt seems to be standing in opposition to retail investors and the community.

Not long ago, when the @RaveDAO project token RAVE experienced a brief surge, he publicly pointed out that addresses related to RAVE exhibited high token concentration, fund flows through multiple CEXs, and participation by team-linked wallets. He subsequently issued a $10,000 bounty, which the community later raised to $25,000 to solicit relevant internal materials.

This move triggered market panic, causing RAVE to plummet over 90%, leading to significant losses for many holders and sparking widespread market discontent.

On May 6th, ZachXBT began publicly scrutinizing the popular project LAB @LABtrade_, investigating its on-chain addresses, token distribution, and exchange fund flows. He alleged a high possibility of price manipulation by the project team. After privately messaging the founder without receiving a response, he once again issued a $10,000 bounty for materials such as the founder's passport/ID, market maker contracts, or chat records, using the term "War time mode" in related statements, which again sparked controversy.

In fact, in the early days, ZachXBT was perceived as a positive figure standing with retail victims.

For instance, after DeFi Summer, he exposed numerous NFT and DeFi scam projects trying to evade regulation, protecting retail investors from millions of dollars in potential losses. He also helped recover $275,000 in a Coinbase social engineering scam, repeatedly exposed pig butchering scam networks, collaborated with BNB Chain and Paradigm to combat fraud, and issued warnings to Bybit to prevent losses. Early on, the victims of security incidents he investigated were often ordinary retail investors, and he generally did not charge fees, thus establishing this positive persona.

Therefore, his recent frequent whistleblowing inevitably raises questions about his motives.

Of course, engaging in moral criticism here is pointless. The purpose of this article is to deconstruct ZachXBT from multiple perspectives, including his background, the era, and the chain of interests, hoping to interpret the essence of his actions and view this matter rationally from a unique angle.

How Did ZachXBT Become an "On-Chain Detective"?

I believe that anyone's actions can find their answers in their past.

ZachXBT's real name is Zachary Wolk. He is essentially an ordinary young American tech geek. He entered the crypto space in 2017, during the ICO era, as an inexperienced retail investor. Like many young people, he heard stories of overnight riches and hoped to strike gold in the crypto world.

However, things didn't go as planned. The tokens he bought in 2017, which claimed to "change the world," almost all turned out to be rug pulls. Then, in 2018, the Electrum wallet was hit by a malicious update attack (you can look this up; I remember about 200 BTC being lost). He personally lost $15,000. For an ordinary young person at the time, this was undoubtedly a significant sum.

Source: https://www.secrss.com/articles/7475

After being scammed and losing all his money, Zachary Wolk developed a deep hatred for crypto scammers and hackers. He began teaching himself on-chain data tools like Etherscan and Arkham, painstakingly tracing wallet addresses, following fund flows, and gathering evidence, then publicly exposing scam projects on Twitter (now X). Of course, it seems Zachary Wolk had found a new frontier.

So you see, he wasn't born an "on-chain detective." I believe, in essence, this was a victim's self-rescue, which serendipitously opened a new door.

Thus, from his initial attempts in 2018 to the explosive bull market of 2021, he found his niche: becoming a "folk Sherlock Holmes" of the on-chain world.

Actually, 2020 was a crucial turning point. DeFi Summer led to a massive migration of users from exchanges to the blockchain. However, the vast majority lacked the ability to perform on-chain analysis, and on-chain data analysts were considered highly skilled at the time.

So, one must admit that the era provided Zachary Wolk with the perfect stage:

The on-chain crypto space was virtually unregulated at the time. Retail investors, once exploited, usually had to accept their losses. The market desperately needed someone to "administer justice on behalf of heaven."

At the same time, the X platform was one of the largest hubs for the crypto market. Acting as a traffic amplifier, it allowed the anonymous geek ZachXBT's exposures to spread rapidly across the entire industry.

Furthermore, the transparency of on-chain data gave him the weapon to "counterattack." He didn't need to rely on regulators or institutions. Using only his skills and persistence, he could create a deterrent against those who harvested others.

So, for ZachXBT, this is his origin story:

The world never creates righteous heroes out of thin air. He is merely an "on-chain hunter" born from the wave of retail investor exploitation in 2017-2018.

This is akin to the lawless era, where the oppressed at the bottom took up arms for self-defense. The weapon he picked up was on-chain data and public exposure.

If it weren't for that painful $15,000 loss, I am certain there would be no ZachXBT today. And without that era of wild growth, his "detective persona" would have had no soil to thrive in.

If We Place Him Within the Crypto Interest Chain, What Do We See?

In this world, human nature is like water. If the rules change, human nature changes. A person's actions are fundamentally driven by interests.

Therefore, to understand the essence of ZachXBT's actions, we must place him within the complete interest chain of the crypto world to dissect the logic.

The interest chain in the crypto world is typically divided into upper, middle, and lower tiers:

The upper tier usually consists of project teams, CEXs (Binance, Bitget, BNB Chain, etc.), VCs, whales, and project insiders. They control token supply, liquidity, and trading channels, holding the discourse power of the entire chain or industry.

The middle tier includes on-chain data tools, crypto media, KOLs, and even the X platform. They are the "amplifiers" of the chain, responsible for transmitting information and magnifying sentiment, serving both as "propaganda tools" for the upper tier and as platforms for exposing dark secrets.

Then there's the lower tier: global retail investors and exploited victims.

They are at the end of the chain, lacking information advantages and technical capabilities, forced to follow trends passively. They serve as stepping stones for the upper tier's profits and play the role of "the harvested."

ZachXBT, in his early days, primarily positioned himself as a high-value independent on-chain investigator, belonging to the middle-lower tier.

However, he has since gained an additional identity: a semi-official cleaner. Starting in 2025, he officially became an advisor to Paradigm, and in November of the same year, he collaborated with BNB Chain to combat hacker scams.

This new identity shifted his coordinates on the chain upward, moving him to the middle-upper tier.

This upward shift in coordinates directly dictates all his behavioral patterns. Are you starting to see it more clearly now? Let's continue the analysis.

The Continuous "Trigger Pulling" Behavior is an Inevitable Result of Survival and Upward Mobility

As you can see, his continuous exposure of scandals is essentially a "win-win" situation. He not only does good deeds but also gains reputation and benefits, continuously improving his position on the chain.

From a positive value perspective, he has indeed accomplished quite a bit:

He helped exchanges track hackers, exposed Axiom insiders, and cumulatively helped victims and governments recover hundreds of millions of dollars. Notably, in 2025, he helped the US government recover $20 million, taking no compensation for himself.

However, while these actions earned him immense industry prestige, they also brought him tangible benefits. Examples include community donations (the Jeffrey Huang case crowdfunding reached millions of dollars), institutional collaboration offers (Paradigm advisor role), and official cooperation opportunities (BNB Chain).

Of course, ZachXBT's collaboration with BNB Chain has been quite controversial. He had previously heavily criticized CEX insiders and manipulation related to Binance, yet later partnered with BNB Chain under the guise of combating fraud and tracking funds.

The community labeled him a "hypocrite" and a "CZ shill," questioning how he could criticize centralized entities while relying on upstream resources for his livelihood. His response, "for a cleaner ecosystem," hasn't stopped the criticism, which is a classic case of double-standard controversy following economic chain binding.

Regardless, this allowed him to gradually move from an anonymous grassroots geek to a "semi-official" position, achieving an upward shift in his coordinates. This is the positive cash flow he earned within the chain using his exposé skillset.

However, we cannot ignore a core point:

The crypto market is fundamentally an attention economy, also a highly volatile "casino."

The more intense, faster, and more impactful the exposure, the more traffic and discourse power one gains.

Once one stops, traffic drains, prestige declines, and one might even be eliminated from the chain.

Therefore, he needs to continuously speak out and blow the whistle to ensure he doesn't fall from the middle-upper tier, thereby maintaining his interests.

This leads to many of his whistleblowing actions being controversial or even disliked, such as:

Publishing a long post accusing Jeffrey Huang of misappropriating 22,000 ETH (~$38 million at the time), promoting 10+ failed projects, and manipulating Squid DAO. Huang countersued him for defamation.

Publicly exposing the wallet addresses (11 ETH/SOL wallets, holdings over $24 million) of memecoin analyst Murad Mahmudov (@MustStopMurad). Many questioned how he strictly protects his own anonymity while frequently revealing others' complete on-chain traces, criticized as "wielding information asymmetry as a weapon only for his own benefit."

Publicly criticizing the Keeta testnet as "completely fake," driven by "sketchy KOLs" with suspicious supply control, causing the KTA token to drop 20-26%. After the price crashed, he deleted all related tweets (including the accusation thread). The Keeta team responded, calling it FUD and conducted a public stress test. Many on the community and Reddit screenshotted his actions, accusing him of a "FUD, dump, and delete" strategy, a classic "trigger and retreat" controversy.

And the recent RAVE and LAB incidents, among others.

So, as I mentioned earlier, many call him a "hypocrite," but from an economic chain perspective, these actions are entirely rational. He is not a "saint" independent of the chain but a link within it, forced to make compromises to maintain his position.

Collaborating with BNB Chain isn't "betrayal"; it's upstream-downstream binding. As an upstream platform, BNB Chain can provide him with more resources, more exposure, and make his investigations more impactful.

Protecting himself anonymously while exposing others' information is because his core asset is "information asymmetry." Protecting himself allows him to continue surviving in this industry and avoid retaliation.

Exposing others allows him to trade for traffic and reputation, maintaining his "detective" persona.

As for deleting posts and settling, these are essentially trade-offs based on interests. When accusations risk legal repercussions or can secure more favorable cooperation terms, compromise becomes the most rational choice. After all, securing one's position on the chain is more important than stubbornly pursuing "justice."

Source: https://www.wired.com/story/meet-zachxbt-243-million-crypto-theft/

Rules Are Like Water; He Is Just a "Natural Product" of the Chain

So, we won't engage in moral judgment; let's just stick to the facts:

ZachXBT embodies the most authentic human nature – he has a sense of justice, but justice must serve survival; he has abilities, but abilities must maintain his position; he has principles, but principles must yield to interests.

His sense of justice is real – rooted in his experience of being scammed in 2017. He deeply understands the pain of retail investors being exploited, so his goals have always included "helping victims recover funds and punishing scammers."

But his sense of justice is not pure – within the economic chain, he must prioritize his own survival and upward mobility, leading to compromises and controversies.

He is intelligent and diligent – his on-chain tracking ability is world-class. He can uncover scandals invisible to others from vast amounts of wallet addresses and transaction flows.

But intelligent people are most easily blinded by their position. He firmly believes, "My exposés are justice; questioning me is defending the guilty." This stubbornness is also part of maintaining his persona.

In reality, anyone sitting in his position would likely act similarly.

The rules of the crypto world are just like this:

Anonymity protects the strong, information asymmetry harvests the weak, and attention determines discourse power. He simply adapts to the rules, exploits them, and finds his way to survive within the chain – clearing the industry's "poison" while earning his own "profit," acting as both a "folk hunter" and a "semi-official cleaner."

ZachXBT's existence is an inevitable product of the wild growth era of the crypto market: Regulatory vacuum, no industry rules, helpless retail investors – such "folk hunters" were bound to emerge.

He is neither a hero nor a scammer. He is merely the sharpest thorn in the chain of interests, piercing the harvesters while also clinging to the chain, both clearing poison and pursuing profit.

His proclaimed "War time mode" is his default state of survival. As long as the rules of the crypto sphere remain unchanged, as long as the harvesting logic of the chain persists, he will not stop – stopping would mean admitting to being eliminated by the chain, admitting that "the crypto world will forever be a jungle."

LAB is just his latest trigger pull; there will be more to come.

And the wartime mode never ends – perhaps it is his only way to survive within the crypto interest chain.