Cointime

Download App
iOS & Android

Showing off wealth backfires! 18-year-old hacker on Discord posts pictures of his wallet, accidentally revealing a $19 million crypto theft case

A flaunting of wealth farce on Discord voice channel unexpectedly uncovered a $19 million cryptocurrency theft case. Last night, well-known blockchain detective ZachXBT exposed in a post that Dritan Kapllani Jr., an 18-year-old hacker from the United States, is suspected of participating in multiple social engineering attacks on encrypted users. Although he has not been formally charged, he has been included in the scope of "conspirators" in US judicial documents, and his once decadent and extravagant life has collapsed overnight.

Trigger: Discord flaunts wealth, $3.68 million wallet unexpectedly exposed

This shocking case in the crypto industry has a dramatic starting point. On April 23, 2026, in a Discord voice call called "Band 4 Band", participants competed in the most straightforward way - showing off their personal assets. As the atmosphere gradually escalated, Dritan, who was not to be outdone, turned on screen sharing to prove that he was "richer" and displayed his Exodus wallet interface, clearly showing a balance of about 3.68 million US dollars.

At that time, he may have just wanted to showcase his "strength" among his peers, but he never expected that this impulsive flaunting of wealth would become his fatal flaw exposed. A few weeks later, this screen shared scene was dug up, and blockchain detective ZachXBT used wallet addresses as a breakthrough point to gradually connect scattered transaction records, revealing a long hidden path for the transfer of huge funds.

Source: 185 bitcoins stolen, $5.3 million flowing into flaunting wealth wallet

Going back to March 14, 2026, a major cryptocurrency theft quietly occurred: 185 bitcoins were stolen through social engineering methods, with a market value of approximately $13 million at the time. The stolen funds did not stay, but were quickly transferred out of the original address in a short period of time and entered a complex on chain diversion system, attempting to cover up their traces.

Just the day after the theft, $5.3 million of this huge amount of funds was transferred to the wallet displayed by Dritan on Discord (address: 0x4487db847DB2fc99372a985743a26f46e0b2bba6). In the following weeks, the $5.3 million was continuously split and transferred through multiple intermediate addresses. By the time Dritan flaunted his wealth on April 23, about $1.6 million had been further transferred in an attempt to completely erase the traces of funds.

Deep digging: Not a first-time offender, multiple theft cases point to the same person

Further tracing the wallet address displayed by Dritan, on chain detectives discovered that this was not his first time being involved in cryptocurrency theft. The source of funds for this wallet can be traced back to multiple social engineering theft cases in 2025, with a total amount involved exceeding 5.85 million US dollars.

Although the victims of these cases are different and the time of the incident varies, the operating mode after the funds are stolen is highly consistent: the funds are quickly split and transferred through a fixed path of addresses, and ultimately mostly flow to the wallet displayed by Dritan. More importantly, Dritan's involvement in the case is also linked to another arrested hacker.

It is reported that Dritan had a dispute with hacker John Daghita (pseudonym Lick) during a "Band 4 Band" call. Later, Lick was arrested on suspicion of stealing approximately $46 million in US government funds. Prior to his arrest, he had publicly disclosed Dritan's old wallet address (address: 0x97da0685dbba50b4cbabb0ca9e8336f4fbe41122) in a deleted Telegram post, which was considered a retaliatory act.

On chain analysis shows that the fund splitting method and transfer path of this old address highly match the wallet displayed by Dritan during his flaunting of wealth, which proves that both addresses are controlled by Dritan and further confirms his long-term involvement in cryptocurrency theft.

Breakthrough: Judicial document naming, identity of conspirators exposed

On May 11, 2026, this case reached a critical breakthrough - the criminal indictment against Trenton Johnson was unsealed. Trenton Johnson has been formally charged and faces up to 40 years in prison for his involvement in the March 14th theft of 185 bitcoins.

It is worth noting that the indictment explicitly mentions a key "conspirator 1 (CC-1)", and the on chain analysis community, combined with the flow of funds and relevant evidence, has confirmed that the conspirator is Dritan Kapllani Jr. Although Dritan has not yet been formally charged, he has inferred from the "related personnel" on the chain and officially entered the "conspiracy structure" in the judicial narrative, just one step away from being charged.

In addition, the indictment also exposed another person involved in the case - Meme Coin KOL Yelotree, who is accused of assisting in money laundering through his car rental business in Miami and also faces a maximum sentence of 30 years.

Conclusion: At the age of 18, adulthood has come to an end, and the extravagant lifestyle has finally come to nothing

Prior to this, Dritan had long lived a luxurious and extravagant life, frequently posting flaunting wealth content on Instagram and maintaining close interaction with other hackers through Telegram. In the hacker circle, he was even given the "protagonist halo" - multiple affiliated hacker groups around him (such as ACG, 41/RM Boyz, etc.) were successively investigated by law enforcement agencies, but he always escaped unscathed.

But all of this came to an abrupt end as he turned 18 years old. After the disappearance of the "exemption protection" brought by the status of a minor, all of his past involvement in cryptocurrency theft will be held accountable in accordance with the law. An impulsive display of wealth not only exposed his crimes, but also ended his short and decadent 'hacker career'.

At present, the case is still under further investigation. Whether Dritan will be formally charged and what legal sanctions he will face in the future are still pending further notification from the judicial authorities. And this case also sounded the alarm for the crypto community: the traces on the chain are difficult to conceal, and any attempt to obtain wealth through theft will eventually pay a legal price.

Comments

All Comments

Recommended for you

  • BTC Surpasses $82,000

    Market data shows that BTC has surpassed $82,000, currently priced at $82,009.39, with a 24-hour increase of 3.54%. The market is experiencing significant volatility, so please ensure proper risk management.

  • BTC Surpasses $81,000

    Market data shows that BTC has surpassed $81,000, currently priced at $81,005.66, with a 24-hour increase of 1.57%. The market is experiencing significant volatility, so please ensure proper risk management.

  • Senator Warren Calls for SEC Investigation into Trump Family's Cryptocurrency Company

    On May 14, U.S. Senator Warren requested the Securities and Exchange Commission (SEC) to investigate the cryptocurrency company owned by the family of President Trump.

  • BTC Surpasses $80,000

    Market data shows that BTC has surpassed $80,000, currently priced at $80,011.1, with a 24-hour decline of 0.31%. The market is experiencing significant volatility, so please ensure proper risk management.

  • Central Bank: M2 Money Supply Reaches 353.04 Trillion Yuan at End of April, Up 8.6% Year-on-Year

    On May 14, data from the central bank showed that at the end of April, the broad money supply (M2) reached 353.04 trillion yuan, an increase of 8.6% year-on-year. The narrow money supply (M1) amounted to 114.58 trillion yuan, up 5% year-on-year. The amount of currency in circulation (M0) was 14.75 trillion yuan, marking a year-on-year increase of 12.2%. In the first four months, a net cash injection of 653 billion yuan was made.

  • Nvidia Soars in After-Hours Trading

    On May 14, Nvidia experienced a rapid increase in after-hours trading on the US stock market, rising nearly 2% to $230. (Dongxin News Agency)

  • China and US Agree to Build Constructive Strategic Stability Relationship

    Beijing, May 14th – On the morning of May 14th, Chinese President Xi Jinping held talks with US President Donald Trump, who is on a state visit to China, at the Great Hall of the People in Beijing. President Xi Jinping stated: "President Trump and I agree to establish a 'constructive strategic stability relationship' as the new positioning for China-US relations." (CCTV News)

  • Key Updates for May 14 Afternoon

    7:00-12:00 Keywords: Aave, Metaplanet, DeFi Development, Cerebras Systems 1. Aave: Cross-chain between the rsETH mainnet and L2 has reopened; 2. Metaplanet has postponed its preferred stock listing plan due to structural issues in the Japanese market; 3. The U.S. government seeks to confiscate $1.07 million in assets before sentencing of former Celsius executives; 4. Aave proposes to integrate the Babylon protocol in version V4, launching a native BTC lending module; 5. Solana Treasury's DeFi Development report states that the value of each SOL share has increased by 108% year-on-year; 6. Bipartisan negotiations on the Clarity Act failed to reach an agreement overnight, with Democrats divided over ethical and BRCA provisions; 7. AI chip manufacturer Cerebras Systems has raised $5.55 billion in its IPO, making it the largest fundraising of the year to date.

  • Trump: US-China Relations Will Be the Best in History

    On May 14, according to China News Service, US President Trump stated that the relationship between the United States and China will be the best in history.