Genesis Creditor Heist
- Key Compromise
- ZachXBT
On August 19, 2024, three attackers—Malone Lam (Greavys), Veer Chetal (Wiz), and Jeandiel Serrano (Box)—orchestrated one of the largest single-victim crypto thefts in history, stealing 4,064 BTC ($243M) from a Genesis creditor. Using sophisticated social engineering, they impersonated Google and Gemini support to reset the victim's 2FA and drain the wallet. ZachXBT's investigation uncovered a leaked celebration video showing attackers' real-time reactions, Instagram posts of luxury spending including pink car gifts, and device fingerprints linking them to Mark Cuban's June 2024 compromise. FBI raids in Miami and LA on September 18, 2024 led to multiple arrests. A fourth suspect, British national Danish Zulfiqar, was reportedly arrested in Dubai in December 2024 with $18.5M seized. Funds were rapidly laundered across 15+ exchanges.
Incident Details
- Type
- FRAUD
- Funds Lost
- $243M
- Status
- Partial recovery
FBI raids resulted in multiple arrests including Malone Lam and Jeandiel Serrano. Fourth suspect Danish Zulfiqar arrested in Dubai with $18.5M seized. $9M frozen across exchanges, $500K returned to victim.