British Hacker Behind Genesis Creditor Heist Likely Arrested as $18.6M in Crypto Seized After Dubai Raid
κ/@investigations β’
Revision history
2 recorded changes
Want your article here?
Promote with Leviathan News"The British threat actor Danny / Meech aka Danish Zulfiqar (Khan) appears to have likely been arrested by law enforcement and had crypto assets seized. $18.58M currently sits at 0xb37d617716e46511E56FE07b885fBdD70119f768 I previously was monitoring and had identified him for his involvement in the $243M Genesis Creditor theft from August 2024 with Malone, Veer, Chen, & Jeandiel. Danny was also involved in the Kroll SIM Swap from Aug 2023 that compromised the PII of BlockFi, Genesis, & FTX creditors that has since lead to $300M+ stolen via targeted social engineering scams. Several hours ago multiple addresses tied to him I was tracking consolidated funds to 0xb37d in a similar pattern to other law enforcement seizures."
Top comment by @Spencer420
More coverage
- British Hacker Linked to $243M Genesis Theft Reportedly Detained ... (cryptorank.io)
- Suspected $243M Crypto Hacker Arrested After Major Breakthrough ... (mexc.com)
- ZachXBT: British Hacker Linked to $243M Gemini Theft Allegedly ... (binance.com)
- Suspected $243M Genesis Hacker May Have Been Arrested in Dubai (financefeeds.com)
- Genesis Market: How to check if you have been targeted and protect ... (nationalcrimeagency.gov.uk)
Explore the topic
More on Hacker
Cardano wallet provider SecondFi will shut down after hackers stole $2.4M in ADA by exploiting a transaction-signing flaw that exposed users' private keys
Coindesk Β·
Crypto hackers stole $75.9M across 40 incidents in June, down 7% from May, with Humanity Protocol suffering the month's largest exploit at up to $36M
The Block Β·
SecondFi losses may exceed $20M as SlowMist founder flags 129M ADA tied to suspected hacker wallets
π/@evilcos Β·
Chainalysis signs KNPA deal to train Korean police after DPRK hackers stole over $2B in 2025
Chainalysis Β·
Researchers uncover how hackers used over 34 fake npm, PyPI and Rust packages in βTrapDoorβ attack targeting Solana, Sui and Aptos developers to steal wallets and cloud credentials
Coindesk Β·
Superfortune investigates $GUA multisig transaction that targeted hacker address
π/@SUPERFORTUNE888 Β·
Cardano wallet provider SecondFi will shut down after hackers stole $2.4M in ADA by exploiting a transaction-signing flaw that exposed users' private keys
Coindesk Β·
Crypto hackers stole $75.9M across 40 incidents in June, down 7% from May, with Humanity Protocol suffering the month's largest exploit at up to $36M
The Block Β·
SecondFi losses may exceed $20M as SlowMist founder flags 129M ADA tied to suspected hacker wallets
π/@evilcos Β·
Chainalysis signs KNPA deal to train Korean police after DPRK hackers stole over $2B in 2025
Chainalysis Β·
Researchers uncover how hackers used over 34 fake npm, PyPI and Rust packages in βTrapDoorβ attack targeting Solana, Sui and Aptos developers to steal wallets and cloud credentials
Coindesk Β·
Superfortune investigates $GUA multisig transaction that targeted hacker address
π/@SUPERFORTUNE888 Β·