2024

Bittensor

<p>ZackXBT, a renowned on-chain crypto and non-fungible token sleuth, has successfully tracked the infamous suspects of the Bitttensor hack attack. Bittensor suffered an attack on July 04, 2024, that left more than $28 million stolen. The on-chain sleuth ZackXBT has linked the hack attack to a former Bittensor employee. In this article, we shall explore his investigation in more detail.</p>
<h2 id="bittensor-hacker-revealed">Bittensor Hacker Revealed</h2>
<p>In an October 15 blog post, ZackXBT confirmed that he has successfully tracked and revealed the perpetrators behind the $28 million Bittensor hack. Bittensor is an open-source, decentralized protocol that creates a global marketplace for artificial intelligence using a blockchain network to incentivize collaborative machine learning. It uses a native cryptocurrency, TAO, to reward participants who contribute valuable AI models and computational power.</p>
<blockquote class="twitter-tweet">
 <p>2/ 32 <a href="https://twitter.com/search?q=%24TAO&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$TAO</a> holders experienced unauthorized transfers in excess of $28M from May to July 2024 and the Bittensor network was temporarily halted on July 2, 2024.</p>
 <p>A post-mortem published by the team revealed the thefts were the result of a supply chain attack after a malicious PyPi… <a href="https://t.co/b6PfsnwkjW" rel="noopener noreferrer nofollow">pic.twitter.com/b6PfsnwkjW</a></p>
 <p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1978465694644899917?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 15, 2025</a></p>
</blockquote>
<p></p>
<p>Between May and July 2024, 32 $TAO holders experienced unauthorized transfers totaling over $28 million. The Bittensor breach occurred via a compromised PyPi package manager, which allowed attackers to steal unencrypted cold key details. PyPI is a site that hosts packages for the Python programming language. Python packages are distributed via PyPI, which makes it easy for developers to import advanced functionality into their Python code.</p>
<p>The hackers uploaded a malicious file version 6.12.2 of the official Bittensor code, indicating that the attacker must have gained access to the Bittensor PyPI account or injected malicious code into the Bittensor codebase before it was uploaded as version 6.12.2. The Bittensor hack affected users who downloaded and used version 6.12.2 of the code. The incident left users with over $28 million in losses.</p>
<h2 id="zackxbt-tracks-hacker-via-nft-wash-trades">ZackXBT Tracks Hacker Via NFT Wash Trades</h2>
<p>In his deep investigation, the on-chain sleuth ‘ZackXBT’ has found that the attackers carried out the theft through a malicious PyPi supply chain attack, then transferred the stolen funds through Bittensor’s native bridge to Ethereum. The hackers have transferred approximately $4.94 million between multiple addresses to the privacy protocol Railgun, ultimately converting it to Monero.</p>
<p>Moreover, criminals have funneled approximately $100,000 of the stolen funds into anime NFTs, exploiting the complexity of NFT transactions to obscure their trail. Before summarizing his defense, ZackXBT noted that it’s extremely rare to see exploits or hacks involve NFT wash trading, and I think the relationship between each address is just too coincidental, given how they were funded before NFT purchases and traded multiple times above the floor price for the collection.</p>
<p>ZackXBT has linked the hack to ‘Rusty’ on X (formerly Twitter), a former Opentensor engineer, deploying an NFT presale that accepted funds from the hack. It’s worth noting that a civil lawsuit was filed against multiple suspects based on these findings earlier this year. Hopefully, law enforcement will eventually move forward with this criminal case now that the evidence has been found.</p>
<h3 id="related-nft-news">Related NFT News:</h3>
<ul>
 <li><a href="https://insidebitcoins.com/news/yuga-labs-picks-opensea-as-its-official-nft-marketplace" rel="noopener noreferrer nofollow">Yuga Labs Picks OpenSea As Its Official NFT Marketplace</a></li>
 <li><a href="https://insidebitcoins.com/news/exciting-news-for-nft-investors-as-monad-airdrop-goes-live" rel="noopener noreferrer nofollow">Exciting News For NFT Investors As Monad Airdrop Goes Live</a></li>
 <li><a href="https://insidebitcoins.com/news/sad-nft-news-benoit-pagotto-rtfkt-founder-dies-at-41" rel="noopener noreferrer nofollow">Sad NFT News: Benoit Pagotto, RTFKT Co-founder, Dies At 41</a></li>
</ul>

ZackXBT Reveals How Hackers Are Using NFTs To Obscure Trials

Table of Contents

Inside Bitcoins

Other articles published on Oct 16, 2025

Join our free newsletter for daily crypto updates!