Renowned on-chain investigator ZachXBT has publicly identified a United States resident as a primary suspect in a series of sophisticated social engineering attacks targeting cryptocurrency holders. The investigation links the individual to the theft of approximately $30 million in digital assets. This revelation comes as law enforcement agencies intensify their crackdown on high-value cybercrimes within the blockchain ecosystem, highlighting the growing coordination between independent analysts and judicial authorities.
The 185 BTC Heist and Key Suspects
The investigation centers on a significant security breach in March 2026, during which 185 BTC—valued at roughly $12.5 million at current market rates—was stolen. ZachXBT identified Dritan Kapllani Jr. as a central figure in these operations, noting that the suspect previously exposed an Exodus wallet containing $7.68 million during a Discord communication. While Kapllani is referred to as "Conspirator 1" (CC-1) in official documentation, he has not yet been formally indicted by a grand jury.
- Primary Suspect: Dritan Kapllani Jr., allegedly linked to $30 million in total thefts.
- Key Evidence: On-chain tracking and accidental exposure of private wallet balances.
- Accomplices: Legal documents name Trenton Johnson as a direct participant in the 185 BTC theft.
Legal Consequences and Broadening Investigations
The judicial response to these findings reached a milestone on May 11, 2026, when US authorities unsealed a criminal complaint against Trenton Johnson. Johnson is currently facing severe legal repercussions, with a potential prison sentence of up to 40 years for his role in the March heist. The severity of the charges reflects the US government's stance on digital asset theft and wire fraud. Furthermore, the investigation has implicated other figures within the crypto community, including the meme coin influencer known as yelotree, who is alleged to have provided assistance during the illicit operations.
The identification of these suspects underscores the transparent nature of blockchain technology, which allows investigators to trace funds across various networks despite attempts to obfuscate transaction histories. As the legal proceedings against Johnson move forward, the community remains watchful for further indictments regarding the remaining "conspirators" identified in ZachXBT’s report. This case serves as a stark reminder of the persistent risks of social engineering and the increasing efficacy of on-chain forensics in bringing threat actors to justice.
Frequently Asked Questions
Quick answers to the most common questions about this topic.
For educational purposes only. Nothing here constitutes financial or investment advice. Crypto markets are highly volatile — always DYOR before making any decisions.
Fact-checked per our editorial policy. We maintain strict independence from advertisers. Spot an error? Let us know.