{"id":91899,"date":"2025-12-05T17:58:00","date_gmt":"2025-12-05T14:58:00","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=91899"},"modified":"2025-12-05T18:01:35","modified_gmt":"2025-12-05T15:01:35","slug":"zachxbt-reports-arrest-of-suspect-in-4100-btc-theft-from-genesis-lender","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/zachxbt-reports-arrest-of-suspect-in-4100-btc-theft-from-genesis-lender\/","title":{"rendered":"ZachXBT Reports Arrest of Suspect in 4100 BTC Theft from Genesis Lender"},"content":{"rendered":"<p>Police have reportedly detained a hacker linked to the theft of $243 million from a Genesis lender, according to on-chain detective ZachXBT.<\/p>\n<p><script async src=\"https:\/\/telegram.org\/js\/telegram-widget.js?22\" data-telegram-post=\"investigations\/290\" data-width=\"100%\"><\/script><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>&#8220;British cybercriminal Danny \/ Meech, also known as Danish Zulfikar (Khan), appears to have been detained by law enforcement, and his crypto assets seized,&#8221; he wrote.<\/em><\/p>\n<\/blockquote>\n<p>ZachXBT pointed to an Ethereum address as evidence, where approximately $18.58 million in cryptocurrency has been frozen. According to the expert, the wallet belongs to the suspect.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>&#8220;Several addresses I track, associated with him, transferred funds to [this wallet] in a pattern typical of law enforcement seizures,&#8221; explained the on-chain detective.<\/em><\/p>\n<\/blockquote>\n<p>He also noted that Zulfikar was &#8220;last located in Dubai.&#8221; It is believed that a search was conducted at his villa.<\/p>\n<p>Other affected individuals have also been detained. ZachXBT indirectly confirmed this by noting that several of the hacker&#8217;s contacts &#8220;have stopped communicating in recent days.&#8221;<\/p>\n<p>As of the time of publication, no official statements have been made by Dubai police or UAE regulators. Local media also lack any potentially related information about the hacker and his arrest.<\/p>\n<h2 class=\"wp-block-heading\">Context<\/h2>\n<p>ZachXBT is the author of an investigation into one of the most notorious thefts in the crypto industry, which targeted the lender Genesis.<\/p>\n<p>The fraudsters posed as Google support, convinced the victim to reset two-factor authentication for their Gemini exchange account, and used special software to gain full control of the device. As a result, they obtained private keys and transferred 4064 BTC through exchanges and mixers.<\/p>\n<p>In September 2024, thanks to information provided by the expert, <span data-descr=\"Federal Bureau of Investigation of the USA\" class=\"old_tooltip\">FBI<\/span> <a href=\"https:\/\/forklog.com\/en\/news\/us-authorities-arrest-suspects-in-4100-btc-theft-from-genesis-creditor\">arrested<\/a> three suspects known as Greavys, Wiz, and Box (later identified as Malone Lam, Vir Chetal, and Jandiel Serrano). All were gamers and self-taught hackers.<\/p>\n<p>Since then, American authorities have initiated a series of cases related to the criminal group. The US Department of Justice <a href=\"https:\/\/www.justice.gov\/usao-dc\/pr\/indictment-charges-two-230-million-cryptocurrency-scam\">charged<\/a> two of its members with a $230 million cryptocurrency fraud. It was later revealed that law enforcement accused the fraudsters of orchestrating a $263 million scheme, which included the theft of over 4100 BTC from Genesis.<\/p>\n<p>According to the investigation, the stolen funds were spent on luxury cars, travel, and nightclubs.<\/p>\n<p>In October, ZachXBT <a href=\"https:\/\/forklog.com\/en\/news\/zachxbt-uncovers-3-million-xrp-theft-from-american-wallet\">uncovered<\/a> a scheme involving the theft of $3 million in XRP from the wallet of an elderly American.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Police have reportedly detained a hacker linked to the theft of $243 million from a Genesis lender, according to on-chain detective ZachXBT.<\/p>\n","protected":false},"author":1,"featured_media":91900,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Police have reportedly detained a hacker linked to the theft of $243 million from a Genesis lender.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[18,1154,1380],"class_list":["post-91899","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-bitcoin","tag-crimes","tag-genesis-global-capital"],"aioseo_notices":[],"amp_enabled":true,"views":"259","promo_type":"1","layout_type":"1","short_excerpt":"Police have reportedly detained a hacker linked to the theft of $243 million from a Genesis lender.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/91899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=91899"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/91899\/revisions"}],"predecessor-version":[{"id":91901,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/91899\/revisions\/91901"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/91900"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=91899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=91899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=91899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}