ZachXBT Blows Lid Off $4M Coinbase Heist—Crypto Security Under Fire

Crypto's self-proclaimed watchdog strikes again. Blockchain sleuth ZachXBT just exposed a $4 million theft from Coinbase—another black eye for exchange security.

How'd they pull it off? Details remain scarce, but the breach raises familiar questions about centralized custody risks. Meanwhile, Coinbase's compliance team scrambles to explain how $4M vanished on their watch.

Remember: Not your keys, not your crypto... until the next 'fully regulated' exchange gets drained. The irony? This theft probably cost less than their last SEC legal bill.

• ZachXBT exposed Christian Nieves, also known as “Daytwo,” for his leading role in a $4 million phishing scam that targeted Coinbase users.
• The investigation also revealed Nieves’ addiction to gambling and how he spent large portions of the stolen money in casinos.

ZachXBT, a well-known blockchain investigator, has exposed a crypto scammer responsible for stealing $4 million from unsuspecting Coinbase users. 

The on-chain sleuth revealed how the attacker used different fake domains and phishing tactics to drain victims’ wallets. The investigation has earned the analyst praise from members of the crypto community, and it has also sparked renewed concerns about rising crypto scams and the need for stronger user protection within the industry.

ZachXBT Uncovered How the Scammers Operate 

On Monday, the 23rd of June, ZachXBT shared a detailed report on X with call recordings and images exposing how a scammer tricked victims into giving up control of their crypto wallets. The scammer was identified as Christian Nieves and was known online as “Daytwo” or “PawsOnHips.” He allegedly used stolen money to buy himself luxury items and showed them off on social media. 

According to ZachXBT, Nieves funded this lifestyle by running a fake support call center. The idea was that He and the members of His team WOULD pose as part of the Coinbase staff and then help users create wallets using seed phrases they had prepared. By this means, any money victims added to their wallet was automatically under the control of the scammers. Nieves did not only manage the small call center but also acted as one of the callers. 

His group mainly focused on making victims set up Coinbase wallets through phishing websites. A video showing the panel he used and a recording of his voice during one of the calls were also shared.

Further Investigations from ZachXBT Show Scammers Gambling Habits

During the course of the investigation, ZachXBT also uncovered that the scammer had a huge gambling problem, as he lavishly spent a portion of his stolen money in casinos where he ended up losing everything. Eventually, he began to steal from his own team members. 

On-chain tracking also confirmed recent casino deposit addresses linked to him, proving the scam’s reach. 

Unlike other scams of this nature, Daytwo and his team didn’t try to stay anonymous, as they lived very lavish lifestyles, often joined Discord calls where they talked openly about moving stolen funds, and even showed their faces, making it easier for investigators to uncover their identities.