
Crypto Sleuth Uncovers Wrongful Arrest in Bored Ape NFT Theft
In a recent exposé, prominent cybersecurity researcher ZachXBT has revealed that the wrong individual was detained in connection with a high-profile 2022 Bored Ape Yacht Club (BAYC) NFT theft. ZachXBT, known for his meticulous blockchain investigations, identified a different suspect through forensic tracing, but law enforcement reportedly misidentified a former Yuga Labs security researcher, Sam Curry, as the culprit.
The incident underscores the complexities of investigating crypto crimes and the challenges associated with identifying the correct perpetrators in a decentralized ecosystem. ZachXBT, in a May 9th X post, detailed how he traced the stolen NFTs through Tornado Cash, an Ethereum mixer, to identify a suspect who appears to have been involved in the theft.

A Case of Mistaken Identity
However, in 2023, law enforcement officials detained Sam Curry, a former Yuga Labs security researcher, at an airport, mistakenly believing him to be the perpetrator. According to ZachXBT, law enforcement reviewed logs from OpenSea, the NFT marketplace, which included Curry’s home IP address. This information was then incorrectly used to link him to the theft.
In reality, ZachXBT explained that Curry was actually investigating the theft as part of his security work at Yuga Labs. He had access to a private key that was embedded in the website’s JavaScript by the actual threat actor, leading to the mistaken association.
The Challenges of Crypto Forensics
This case highlights the challenges faced by law enforcement when investigating crypto crimes. The anonymity offered by blockchain transactions, coupled with the use of mixers like Tornado Cash, can make it difficult to trace the flow of funds and identify the responsible parties.
ZachXBT‘s detailed analysis, involving forensic tracing and on-chain investigations, sheds light on the importance of meticulous investigations in the crypto space. It also underscores the potential for misidentification when relying solely on superficial data points.
ZachXBT has called for law enforcement to investigate the true suspect identified through his research, urging them to request data from their social media accounts and examine their on-chain transactions.
The case serves as a reminder of the ongoing need for sophisticated investigative tools and expertise in navigating the complexities of the crypto world. As the digital asset landscape continues to evolve, ensuring accuracy and fairness in investigations will remain crucial for protecting both victims and the integrity of the ecosystem.