Logo
ZachXBT
2 months ago
1/ An investigation into the convicted UK hacker Gurv (Gurvinder Bhangu) and his connection to the recent Sydney Sweeney and Bob Odenkirk X account compromises resulting in $530K + stolen by creating Solana meme coin scams.
ZachXBT
2 months ago
In response ZachXBT to his Publication
2/ On July 2nd Sydney Sweeney was SIM swapped and a link to a meme coin was posted causing the price to spike and crash.

Team wallets from the SWEENEY scam sold $515K +

Main team wallets
AgySZeAtqM3iSbvMPxv2g94oTd3segx4WdKuFD7M5CEr
jQEaiiAkRGhFoCDnjxn6mmtrksC4EckF38fxkaNMs1j
ZachXBT
2 months ago
In response ZachXBT to his Publication
3/ After cashing out the hacker began trolling on social media.

They tried taking credit for other recent incidents such as Hulk Hogan and 50 Cent though there is little evidence to show they were also responsible for these.
ZachXBT
2 months ago
In response ZachXBT to his Publication
4/ Using a timing analysis we can see the proceeds from the scam were sent to an exchange on Solana before being swapped to Bitcoin and Ethereum.

Destination address
0x0350730e4907cd69d1f3cf89f42a58091e397b11
bc1qs2lg3m278cuem2kz6shx6vn9xxzvf8lrd67dp5
bc1qvpjvdjvl98z2uz5dxhv3s32f3eenvjwzdtmlf8

The funds were split on-chain so we can infer there were multiple people involved.
ZachXBT
5/ After the incident screenshots of Gurv receiving codes to login to Sydney Sweeney’s account from the SIM swap on Telegram appeared online.

Attached is a receipt from Verizon for the Sydney Sweeney SIM Swap.
2 months ago
In response ZachXBT to his Publication
ZachXBT
2 months ago
In response ZachXBT to his Publication
6/ Gurv is a convicted hacker having shortly served time in the UK for hacking into Instagram accounts and blackmailing the users.

At the time Gurv told law enforcement “it’s not even a crime”
ZachXBT
2 months ago
In response ZachXBT to his Publication
7/ Additional comfort is gained Gurv is the same person in the screenshots as in multiple Telegram groups he was seen responding to messages with the same Telegram user ID and talking about his time in prison.