The post ZachXBT Links ‘Lick’ to US Seizure-Related Funds appeared on BitcoinEthereumNews.com. Home » Crypto News ZachXBT claims John “Lick” flaunted wallets tiedThe post ZachXBT Links ‘Lick’ to US Seizure-Related Funds appeared on BitcoinEthereumNews.com. Home » Crypto News ZachXBT claims John “Lick” flaunted wallets tied

ZachXBT Links ‘Lick’ to US Seizure-Related Funds

4 min read

Home » Crypto News


ZachXBT claims John “Lick” flaunted wallets tied to more than $90 million suspected thefts, including US government seizure-linked funds.

‘;
}

function loadTrinityPlayer(targetWrapper, theme,extras=””) {
cleanupPlayer(targetWrapper); // Always clean first ✅
targetWrapper.classList.add(‘played’);
// Create script
const scriptEl = document.createElement(“script”);
scriptEl.setAttribute(“fetchpriority”, “high”);
scriptEl.setAttribute(“charset”, “UTF-8”);

const scriptURL = new URL(`https://trinitymedia.ai/player/trinity/2900019254/?themeAppearance=${theme}${extras}`);
scriptURL.searchParams.set(“pageURL”, window.location.href);

scriptEl.src = scriptURL.toString();

// Insert player
const placeholder = targetWrapper.querySelector(“.add-before-this”);
placeholder.parentNode.insertBefore(scriptEl, placeholder.nextSibling);
}

function getTheme() {
return document.body.classList.contains(“dark”) ? “dark” : “light”;
}

// Initial Load for Desktop
if (window.innerWidth > 768) {

const desktopBtn = document.getElementById(“desktopPlayBtn”);
if (desktopBtn) {
desktopBtn.addEventListener(“click”, function () {
const desktopWrapper = document.querySelector(“.desktop-player-wrapper.trinity-player-iframe-wrapper”);
if (desktopWrapper) loadTrinityPlayer(desktopWrapper, getTheme(),’&autoplay=1′);
});
}
}

// Mobile Button Click
const mobileBtn = document.getElementById(“mobilePlayBtn”);
if (mobileBtn) {
mobileBtn.addEventListener(“click”, function () {
const mobileWrapper = document.querySelector(“.mobile-player-wrapper.trinity-player-iframe-wrapper”);
if (mobileWrapper) loadTrinityPlayer(mobileWrapper, getTheme(),’&autoplay=1′);
});
}
function reInitButton(container,html){
container.innerHTML = ” + html;
}

// Theme switcher
const destroyButton = document.getElementById(“checkbox”);
if (destroyButton) {
destroyButton.addEventListener(“click”, () => {
setTimeout(() => {
const theme = getTheme();
if (window.innerWidth > 768) {
const desktopWrapper = document.querySelector(“.desktop-player-wrapper.trinity-player-iframe-wrapper”);
if(desktopWrapper.classList.contains(‘played’)){
loadTrinityPlayer(desktopWrapper, theme,’&autoplay=1′);
}else{
reInitButton(desktopWrapper,’Listen‘)
const desktopBtn = document.getElementById(“desktopPlayBtn”);
if (desktopBtn) {
desktopBtn.addEventListener(“click”, function () {
const desktopWrapper = document.querySelector(“.desktop-player-wrapper.trinity-player-iframe-wrapper”);
if (desktopWrapper) loadTrinityPlayer(desktopWrapper,theme,’&autoplay=1’);
});
}
}
} else {
const mobileWrapper = document.querySelector(“.mobile-player-wrapper.trinity-player-iframe-wrapper”);
if(mobileWrapper.classList.contains(‘played’)){
loadTrinityPlayer(mobileWrapper, theme,’&autoplay=1′);
}else{
const mobileBtn = document.getElementById(“mobilePlayBtn”);
if (mobileBtn) {
mobileBtn.addEventListener(“click”, function () {
const mobileWrapper = document.querySelector(“.mobile-player-wrapper.trinity-player-iframe-wrapper”);
if (mobileWrapper) loadTrinityPlayer(mobileWrapper,theme,’&autoplay=1′);
});
}
}
}
}, 100);
});
}
})();



Summarize with AI



Summarize with AI

A leaked group chat recording captured a threat actor named “John” screensharing wallet balances and moving millions in crypto, according to findings shared by ZachXBT.

The prominent on-chain investigator said John, also known as “Lick,” was caught showing off approximately $23 million in crypto during a heated argument with another threat actor in a chat group.

“Band for Band” Gone Wrong

The dispute reportedly turned into what cybercrime circles call a “band for band,” where people try to prove who has more money by showing wallet balances and moving funds in real time. ZachXBT said the recording shows John controlling multiple wallets and moving large amounts of crypto while the interaction was being captured.

After reviewing the footage, the investigator said he traced the funds and linked the wallets shown in the recording to more than $90 million in suspected thefts.

ZachXBT said he then traced the funds backward and reported that one of the wallets in the chain received 1,066 WETH on November 20, 2025. He further claimed the funds could be traced back to a wallet that received $24.9 million from a US government address in March 2024, which he said was connected to the Bitfinex hack seizure, a theft from the US government that he had previously reported in October 2024.

He also said the wallet shown in the recording was tied to over $63 million in inflows from suspected victims and government seizure addresses in Q4 2025, listing several large incoming transfers in November and December 2025. The on-chain sleuth added that another 4.17K ETH worth about $12.4 million was received from MEXC and flowed into the same wallet.

USMS Crypto Asset Contract and a Family Tie

ZachXBT said that John had an extensive history of boasting about his net worth on Telegram and shared the account identifier tied to those messages. He also pointed to rumors circulating in cybercrime Telegram channels, which revealed John could be John Daghitia, who was previously arrested in September 2025, but acknowledged that more research would be needed to fully confirm the identity.

You may also like:

Additionally, the investigator raised questions about how John may have gained access in the first place, while stating that John’s father owns CMDSS, a company with an active government IT contract in Virginia. ZachXBT said the firm was awarded a contract to assist the US Marshals Service in managing and disposing of seized and forfeited crypto assets, but added that it remains unclear how John may have obtained access through his father.

After ZachXBT published the thread, he said John quickly changed details on his Telegram profile, including removing NFT-related usernames and updating his screen name. ZachXBT also reported that his own public ENS address was later “dusted” from one of the wallets linked to the suspected thefts.

SPECIAL OFFER (Exclusive)

SECRET PARTNERSHIP BONUS for CryptoPotato readers: Use this link to register and unlock $1,500 in exclusive BingX Exchange rewards (limited time offer).

Source: https://cryptopotato.com/a-wallet-flex-turned-into-an-on-chain-trail-zachxbt-links-lick-to-us-seizure-related-funds/

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

The Manchester City Donnarumma Doubters Have Missed Something Huge

The Manchester City Donnarumma Doubters Have Missed Something Huge

The post The Manchester City Donnarumma Doubters Have Missed Something Huge appeared on BitcoinEthereumNews.com. MANCHESTER, ENGLAND – SEPTEMBER 14: Gianluigi Donnarumma of Manchester City celebrates the second City goal during the Premier League match between Manchester City and Manchester United at Etihad Stadium on September 14, 2025 in Manchester, England. (Photo by Visionhaus/Getty Images) Visionhaus/Getty Images For a goalkeeper who’d played an influential role in the club’s first-ever Champions League triumph, it was strange to see Gianluigi Donnarumma so easily discarded. Soccer is a brutal game, but the sudden, drastic demotion of the Italian from Paris Saint-Germain’s lineup for the UEFA Super Cup clash against Tottenham Hotspur before he was sold to Manchester City was shockingly brutal. Coach Luis Enrique isn’t a man who minces his words, so he was blunt when asked about the decision on social media. “I am supported by my club and we are trying to find the best solution,” he told a news conference. “It is a difficult decision. I only have praise for Donnarumma. He is one of the very best goalkeepers out there and an even better man. “But we were looking for a different profile. It’s very difficult to take these types of decisions.” The last line has really stuck, especially since it became clear that Manchester City was Donnarumma’s next destination. Pep Guardiola, under whom the Italian will be playing this season, is known for brutally axing goalkeepers he didn’t feel fit his profile. The most notorious was Joe Hart, who was jettisoned many years ago for very similar reasons to Enrique. So how can it be that the Catalan coach is turning once again to a so-called old-school keeper? Well, the truth, as so often the case, is not quite that simple. As Italian soccer expert James Horncastle pointed out in The Athletic, Enrique’s focus on needing a “different profile” is overblown. Lucas Chevalier,…
Share
BitcoinEthereumNews2025/09/18 07:38
Marathon Digital BTC Transfers Highlight Miner Stress

Marathon Digital BTC Transfers Highlight Miner Stress

The post Marathon Digital BTC Transfers Highlight Miner Stress appeared on BitcoinEthereumNews.com. In a tense week for crypto markets, marathon digital has drawn
Share
BitcoinEthereumNews2026/02/06 15:16
This U.S. politician’s suspicious stock trade just returned over 200% in weeks

This U.S. politician’s suspicious stock trade just returned over 200% in weeks

The post This U.S. politician’s suspicious stock trade just returned over 200% in weeks appeared on BitcoinEthereumNews.com. United States Representative Cloe Fields has seen his stake in Opendoor Technologies (NASDAQ: OPEN) stock return over 200% in just a matter of weeks. According to congressional trade filings, the lawmaker purchased a stake in the online real estate company on July 21, 2025, investing between $1,001 and $15,000. At the time, the stock was trading around $2 and had been largely stagnant for months. Receive Signals on US Congress Members’ Stock Trades Stocks Stay up-to-date on the trading activity of US Congress members. The signal triggers based on updates from the House disclosure reports, notifying you of their latest stock transactions. Enable signal The trade has since paid off, with Opendoor surging to $10, a gain of nearly 220% in under two months. By comparison, the broader S&P 500 index rose less than 5% during the same period. OPEN one-week stock price chart. Source: Finbold Assuming he invested a minimum of $1,001, the purchase would now be worth about $3,200, while a $15,000 stake would have grown to nearly $48,000, generating profits of roughly $2,200 and $33,000, respectively. OPEN’s stock rally Notably, Opendoor’s rally has been fueled by major corporate shifts and market speculation. For instance, in August, the company named former Shopify COO Kaz Nejatian as CEO, while co-founders Keith Rabois and Eric Wu rejoined the board, moves seen as a return to the company’s early innovative spirit.  Outgoing CEO Carrie Wheeler’s resignation and sale of millions in stock reinforced the sense of a new chapter. Beyond leadership changes, Opendoor’s surge has taken on meme-stock characteristics. In this case, retail investors piled in as shares climbed, while short sellers scrambled to cover, pushing prices higher.  However, the stock is still not without challenges, where its iBuying model is untested at scale, margins are thin, and debt tied to…
Share
BitcoinEthereumNews2025/09/18 04:02