Earlier this week, blockchain investigator ZachXBT published an explosive thread on X alleging that a shadowy figure known online as “John” or “Lick” sat at the center of a web of cryptocurrency thefts that stretched from private wallets to U.S. government seizure addresses.
Onchain Analyst Claims $40M in Crypto Was Drained From US Seizure Wallets
WRITTEN BY
SHARE
The revelations unfolded like a digital whodunit. According to ZachXBT’s onchain analysis, the alleged threat actor exposed himself during a leaked Telegram call, where bravado gave way to breadcrumbs on the blockchain. Wallets flaunted in the exchange were traced to tens of millions of dollars in suspect inflows, including funds linked to U.S. government-controlled addresses tied to past high-profile seizures.
The investigator’s findings suggested the thefts were not smash-and-grab operations, but carefully threaded movements that blended arrogance with technical precision, leaving behind just enough evidence to raise alarms without a clear trail to follow.
As the thread ricocheted across crypto circles, the mystery deepened. ZachXBT later connected the online persona to a rumored real-world identity, igniting questions about access, opportunity, and how such vast sums could slip from addresses believed to be secure. No charges have been filed, and official agencies have remained silent, amplifying speculation rather than settling it.
“Threat actors only continue to showing off stolen funds in leaked recordings rather than simply just staying quiet after an alleged theft from the U.S. Government,” the analyst stated.
For now, the story hangs in a liminal space between accusation and proof—an unsettling reminder that in crypto, the most revealing clues often surface not through force, but through ego, timing, and the immutable record of the blockchain itself.
FAQ ❓
- Who is “John” or “Lick”?
An online alias ZachXBT tied to wallets allegedly linked to multiple large-scale crypto thefts. - What funds were allegedly stolen?
The investigation points to private wallets and U.S. government seizure addresses holding tens of millions of dollars. - How was the actor identified?
Through leaked Telegram recordings and onchain wallet tracing. - Have authorities confirmed the claims?
No charges or official statements have been issued as of Jan. 25, 2026.
