ZachXBT Alleges KuCoin Threatened $250K Crypto Theft Victim

ZachXBT, a well-known blockchain sleuth, posted on his Telegram channel today, June 30, 2026 and highlighted that KuCoin, a well-known cryptocurrency exchange, has reportedly sent a legal-threat to a victim whose $250,000 in crypto was stolen and laundered through accounts on the exchange using purchased KYC identities.
According to the Telegram post, the case is tied to an Atomic Wallet theft that occurred on August 18, 2025. This allegation has raised questions about KuCoin’s handling of fraud, suspicious funds and compliance.
What Happened: Money Moved, Accounts Bought
According to the post, the stolen funds left the address 0x6368D06895b7becdcAC0806F438EfA653fE0a68D and were split across multiple KuCoin deposit addresses, which included 0x6043b2d79670a417fc523213155812846e893dc7 and four other addresses tracked on-chain. Investigators and the victim say the launderers used “purchased KYC”, fake or fraudulently obtained identity documents, to open accounts and cash out on KuCoin.
Instead of working publicly with the victim, ZachXBT says KuCoin sent a legal-threat email to the victim. This prompted a broader outcry from the crypto community about whether the exchange is prioritizing legal posturing over stopping active laundering.
Why This Matters: Compliance vs. Appearance
If true, this incident cuts to the heart of exchange compliance. Booking a legitimate user from getting help while allowing accounts powered by purchased KYC to receive stolen funds is exactly the kind of mismatch that erodes trust. One X user reacted to the incident and even stated that being tough only when users demand redress but slow on suspicious activity increases the cost of trust. Compliance should mean freezing funds quickly, working with victims, and coordinating with law enforcement, not firing off intimidating legal notices.
A Familiar Pattern of Security Criticism
This is not the first time that the blockchain sleuth has called out major crypto exchanges over security failures. The sleuth has, over the years, repeatedly criticized platforms that according to him have failed to protect users or act quickly against criminals.
Coinbase has been one of his most frequent targets. ZachXBT has argued that the exchange has been too slow to respond to users losing hundreds of millions of dollars in sophisticated phishing and fake customer support scams. According to him, there was a lot of time provided to the scammers as their wallets were not detected for many weeks after getting compromised.
He has also criticized Coinbase for focusing on the wrong issues. For example, when some users were advised to avoid using VPNs to reduce account restrictions, ZachXBT pointed out that phishing websites usually block VPN users anyway, making that advice largely irrelevant to the real threat. In the past, he has also raised concerns about account lookouts and data breaches that allegedly contributed to customer losses.
KuCoin has faced similar criticism. ZachXBT previously linked hundreds of KuCoin deposit addresses to AudiA6, a crypto money laundering network allegedly used in large-scale fake investment and scam app operations. He argued that bad actors were able to use the platform for extended periods without meaningful intervention. He has also questioned KuCoin’s role in token launches, claiming some projects moved forward despite most of their token supply being concentrated in the hands of insiders, leaving retail investors at a disadvantage.
Taken together, these cases show a clear pattern. Whenever ZachXBT believes an exchange is slow to react, overlooks suspicious activity, or fails to put user safety first, he does not hesitate to call it out publicly, regardless of how big or well-known the platform is.
Final Thoughts
This latest allegation against KuCoin adds to an ongoing debate about how crypto exchanges should be able to manage compliance, customer protection and fraud prevention. KuCoin has not responded to these allegations as of now, however this particular incident has definitely reignited calls for faster action against suspicious accounts, stronger KYC enforcement and greater transparency when handling such victims of crypto thefts. As the industry develops and matures, users and investors will demand a little more accountability from centralized exchanges.
