Coinbase Hacker Taunts ZachXBT, Swaps $42.5M BTC to ETH
Onchain sleuth and blockchain analyst ZachXBT revealed they were mocked by the Coinbase hacker, who on Thursday swapped roughly $42.5m in Bitcoin for Ether on Thorchain.The hacker appears to have left an on-chain taunt r...
Archive context
Older archive item. Useful for background and entity history, but not a fresh market-moving signal.
Onchain sleuth and blockchain analyst ZachXBT revealed they were mocked by the Coinbase hacker, who on Thursday swapped roughly $42.5m in Bitcoin for Ether on Thorchain.
The hacker appears to have left an on-chain taunt reading “L bozo” aimed at ZachXBT on May 22. The phrase “L bozo” combines internet slang for “loser” with a term for a foolish person.
By stamping this message on the blockchain, the hacker aimed to belittle ZachXBT and show contempt for those pursuing them.
Image Source: Etherscan
Coinbase Refuses $20M Ransom DemandLast week, Coinbase disclosed that a hacker had bribed a customer service agent to access account details for nearly 97,000 users.
The stolen data included government-issued IDs and potentially email addresses, though passwords and private keys remained secure. After accessing this information, the hacker demanded a $20m ransom, threatening to sell or misuse the records for phishing scams or further social-engineering attacks.
Coinbase refused to pay and instead offered a $20m bounty to capture the perpetrator, later confirming that 69,461 clients’ data had been compromised.
Following the ransom refusal, the hacker has now executed a large-scale token swap, converting $42.5m in BTC into ETH via Thorchain. Subsequently, the attacker sold 8,698 ETH for $22.12m in DAI, a move tracked in real time by on-chain analysts.
According to ZachXBT, the hacker accused of stealing Coinbase user data swapped approximately $42.5 million worth of BTC for ETH via Thorchain and left a taunting message on-chain. The hacker had previously bribed a customer service agent to obtain information on nearly 97,000…
— Wu Blockchain (@WuBlockchain) May 22, 2025 Incident Costs May Top $400MCoinbase revealed the breach occurred in December and only came to light earlier this month. The company said overseas agents were manipulated into copying sensitive records, and it has since terminated the employees involved.
Meanwhile, the US Department of Justice has opened a formal probe into the security lapse at Coinbase. The exchange also announced a bounty program to incentivize tips leading to the culprit’s arrest.
Coinbase estimates that direct and indirect costs tied to the incident could climb as high as $400m. The fallout has forced the company to strengthen its insider-threat safeguards, including enhanced agent screening and real-time transaction monitoring.
As the industry grapples with the attack, observers warn that social engineering remains a constant threat to digital asset firms and call for stricter internal controls to safeguard customer data.
The post Coinbase Hacker Taunts ZachXBT, Swaps $42.5M BTC to ETH appeared first on Cryptonews.
Why this matters
This ethereum story adds another data point to the current market tape and is useful when read alongside nearby source coverage.
Original source
Read on CryptonewsRelated market context
Coinbase Unveils AiFi After $100M in x402 Transactions, Targeting AI Agent Payments
Key Takeaways: Coinbase has announced the launch of its financial infrastructure initiative, AiFi, centered on the new AI agent ec...
SafePal Data Breach Exposes 39,798 Crypto Customers, Wallet Keys Remain Secure
Key Takeaways: About 39,798 users’ personal and purchase information were disclosed via a flaw in an order tracking plugin, accord...
Crypto wallet SafePal reveals a data breach exposing nearly 40,000 customers' order info
While the data breach exposed the personal order details of thousands of customers, all private keys, seed phrases, and crypto ass...
Bitcoin purchases halted after data breach puts 250,000 crypto users at risk
Israel’s largest regulated cryptocurrency broker, Bits of Gold, is investigating a data breach that potentially exposed the person...
Binance gave Russia customer details despite 2023 exit, report
Crypto exchange Binance reportedly handed Russian authorities the transaction details of one of its customers despite fully withdr...
Crypto crash liquidations face massive data gap as public records contradict $18B Solana claim
Solana Research Institute, a Solana-aligned research group, used an Aug. 14 post to revive a July open letter by Angus Scott to th...