ZachXBT

A few weeks after American actress Sydney Sweeney suffered a major cryptocurrency-related hack on X, some new details on the attack and the alleged hacker have surfaced.
ZachXBT, an independent onchain sleuth, took to X on July 30 to post his investigation into the recent hack of Sydney Sweeney’s X account and the alleged connection of convicted hacker Gurvinder Bhangu to the incident.
The <a href="https://cointelegraph.com/news/sydney-sweeney-x-account-promotes-crypto-memecoin">X account of the actress was hacked</a> on July 2, 2024, with the attacker promoting a Solana-based token, SWEENEY, in a pump-and-dump scheme. According to findings by ZachXBT, Bhangu was one of the people behind the hack.
Bhangu, also referred to as “Gurv” in the post by ZachXBT, is described as a convicted hacker who has served time in the United Kingdom for hacking into Instagram accounts and blackmailing users.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/30ca5ad6-660f-4f91-91bc-099d6d1b4c7c.png" alt="Crypto sleuth investigates suspect in Sydney Sweeney’s hack">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/zachxbt/status/1818245914580120015" target="_blank" rel="noopener nofollow">ZachXBT</a>
 </figcaption>
</figure>
According to online reports, Gurv also previously <a href="https://www.birminghammail.co.uk/news/midlands-news/teen-blackmailed-instagram-influencers-hacking-21966213" target="_blank" rel="noopener nofollow">hacked</a> three victims in the United States and locked them out of their social media accounts, with one including 1.1 million followers.
“After the incident, screenshots of Gurv receiving codes to log in to Sydney Sweeney’s account from the SIM swap on Telegram appeared online,” ZachXBT <a href="https://x.com/zachxbt/status/1818245951703658674" target="_blank" rel="noopener nofollow">wrote</a>.
<h2 id="gurv-also-allegedly-hacked-breaking-bad-s-bob-odenkirk">Gurv also allegedly hacked Breaking Bad’s Bob Odenkirk</h2>
Using the Ethereum address connected to the Sydney Sweeney SIM swap on July 9, ZachXBT managed to find another attack perpetrated by Gurv or an accomplice.
On July 8, Breaking Bad and Better Call Saul&nbsp;actor Bob Odenkirk also suffered a hack on X, with a hacker posting a link to a memecoin, just like in the Sweeney hack.
Related: <a href="https://cointelegraph.com/news/bitfinex-hacker-heather-morgan-bitcoin-conference-2024">Bitfinex hacker Heather Morgan spotted at Bitcoin Conference 2024</a>
According to ZachXBT’s analysis, the proceeds from the scam were sent to the same Ethereum address that funded the Solana address.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/f667b9ec-9723-49cd-a198-abc7e0b227e3.png" alt="Crypto sleuth investigates suspect in Sydney Sweeney’s hack" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/zachxbt/status/1818245983345770610" target="_blank" rel="noopener nofollow">ZachXBT</a>
 </figcaption>
</figure>
<h2 data-ct-non-breakable="true" id="zachxbt-calls-on-the-uk-to-go-after-sweeney-s-hacker">ZachXBT calls on the UK to go after Sweeney’s hacker</h2>
In the X post, ZachXBT expressed hope that UK law enforcement would quickly pursue Gurv again using the “large amount of evidence” he provided.
The onchain analyst noted that “some of the funds have been transferred to crypto casinos and to purchase gift cards.” He also listed four wallets connected to the hacks and scams. At the time of ZachXBT’s post, the wallets <a href="https://x.com/zachxbt/status/1818245992204169488" target="_blank" rel="noopener nofollow">held</a>&nbsp;$488,000 in cryptocurrency.
As previously reported, SIM swaps have been increasingly used by online hackers, and such attacks are considered non-demanding regarding technical skills. To stay safe, users must be diligent with their identity security and <a href="https://cointelegraph.com/news/crypto-sim-swap-how-easy-is-sim-swap-crypto-hack">follow these steps to prevent such hacks</a>.
Magazine: <a href="https://cointelegraph.com/magazine/thorchain-founder-jp-thor-vampire-attack-defi/">THORChain founder and his plan to ‘vampire attack’ all of DeFi</a>

Crypto sleuth investigates suspect in Sydney Sweeney’s hack

Table of Contents

Cointelegraph

Other articles published on Jul 30, 2024

Weekly Article Recap: 7/15-7/19

Ethereum gains as Open Interest surges: What’s driving the momentum?

Top 3 Explosive Solana Altcoins for 2024 Bull Run

Circle Valuation Drops to $5B from $9B Ahead of IPO

Inside BlockDAG’s Tech Leap with CSO Youssef Khaoulaj: Charting a Path to Market Leading ROI; FET...

BlackRock Sees Low Demand for Other Cryptos Other Than Bitcoin and Ethereum

Join our free newsletter for daily crypto updates!