Wrong Man Detained in $1M Bored Ape NFT Theft, Says ZachXBT

Reputable cybersecurity researcher ZachXBT has revealed a significant misstep in the investigation surrounding a major NFT theft. In a recent X post, ZachXBT stated that law enforcement mistakenly detained Sam Curry, a former Yuga Labs security researcher, in connection with the theft of over $1 million worth of Bored Ape Yacht Club NFTs in 2022.

ZachXBT’s findings, based on extensive forensic analysis, pinpoint a different individual as the likely culprit. His investigation involved intricate blockchain tracing, including reconstruction of funds flowing through the Ethereum mixer Tornado Cash. This led him to identify a specific wallet and associated X account (now deleted) directly linked to the theft.

The error appears to stem from law enforcement relying on OpenSea logs, which mistakenly included Curry’s home IP address due to his previous security work investigating the very theft he was later accused of. Ironically, Curry’s work involved analyzing the attacker’s malicious JavaScript code on the Yuga Labs website.

ZachXBT’s detailed findings strongly suggest that the correct suspect remains at large. He has urged law enforcement to investigate the individual identified in his analysis, leveraging all available data from social media accounts and on-chain transactions associated with their wallet.

This case highlights the complexities of NFT theft investigations and underscores the importance of accurate forensic analysis in navigating the intricacies of the digital asset space. The incident serves as a cautionary tale regarding the potential for misidentification and emphasizes the critical role of experienced blockchain investigators like ZachXBT.

Related: Crypto sleuth ZachXBT says he unmasked 50x Hyperliquid whale

Magazine: Adam Back says Bitcoin price cycle ’10x bigger’ but will still decisively break above $100K