Key Takeaways
Crypto investigator ZachXBT has dropped another explosive investigation.
The new thread from the sleuth ties an 18-year-old to millions of dollars in alleged social-engineering thefts, luxury spending, and a growing web of crypto crime circles known online as “The Com.”
The investigation centers on Dritan Kapllani Jr., whom ZachXBT alleges was connected to roughly $19 million in stolen crypto through years of wallet tracing, Discord recordings, and newly unsealed court documents.
The story spread quickly across Crypto Twitter, not just because of the money involved, but because investigators say much of the evidence was hiding in plain sight.
According to ZachXBT, the breakthrough came after Kapllani Jr. allegedly shared his wallet live during a Discord “band 4 band” call — essentially an online wealth-flex session where users show off balances, cars, watches, and lifestyles to each other.
That footage, combined with on-chain flows and a federal criminal complaint unsealed on May 11, turned what had mostly been rumors inside crypto circles into one of the most talked-about social-engineering cases of the year.
+70
Shiba Inu
Bitcoin
PAX Gold
Ampleforth
Ethereum
Cardano
EOS
Solana
Avalanche
Dogecoin
Ripple
TRON
Bitcoin Cash
Ocean Protocol
Litecoin
Reserve Rights
Ontology
Bitcoin SV
Ethereum Classic
Kusama
Dash
Neo
Chainlink
Qtum
Polkadot
VeChain
Stellar
Tezos
Zcash
Zilliqa
Status
JUST
Cosmos
Ravencoin
Trust Wallet Token
ARPA Chain
Nervos Network
Storj
Beam
NKN
Algorand
Celer Network
THORChain
Fantom
Optimism
Aptos
APEcoin
Wrapped Bitcoin
Compound
Monero
Basic Attention Token
Arweave
Aergo
Decentraland
SushiSwap
Conflux Network
NEAR Protocol
Polkastarter
Ankr
Maker
Artificial Superintelligence Alliance
Mask Network
Cronos
Internet Computer
Badger DAO
USD Coin
BakeryToken
Alpaca Finance
Aave
Treasure
BitTorrent
FLUX
Bancor
IoTex
Build'N'Build
+76
Bitcoin
Ethereum
Tether
USD Coin
Solana
Ripple
Dogecoin
Cardano
Toncoin
Shiba Inu
Avalanche
TRON
Chainlink
Polygon Matic
Polkadot
Wrapped Bitcoin
Litecoin
Dai
NEAR Protocol
Bitcoin Cash
Stellar
Cosmos
Filecoin
Ethereum Classic
Aptos
Hedera Hashgraph
Immutable
Optimism
Arbitrum
VeChain
The Sandbox
Decentraland
Axie Infinity
Injective Protocol
Render
The Graph
Aave
Chiliz
Helium
PAX Gold
Compound
Lido DAO Token
Sui
Conflux Network
Lido Staked ETH
OKB
Uniswap
Pepe
Ondo
Mantle
First Digital USD
XDC Network
Artificial Superintelligence Alliance
Jupiter
Quant
Worldcoin
Bonk
Tether Gold
JITO
JasmyCoin
Core
Floki Inu
Ethereum Name Service
SushiSwap
1inch Network
Tezos
Algorand
Flow
Trust Wallet Token
Curve DAO Token
MultiversX
Basic Attention Token
Enjin Coin
Ethena
Ethena Staked USDe
Build'N'Build
Kava.io
Celestia
Sei
IOTA
Frax
+217
Bitcoin
Ethereum
Tether
Build'N'Build
USD Coin
Solana
Ripple
Dogecoin
Cardano
Toncoin
Shiba Inu
Avalanche
TRON
Chainlink
Polkadot
Polygon Matic
Wrapped Bitcoin
Litecoin
Dai
NEAR Protocol
Bitcoin Cash
Monero
Stellar
Cosmos
Filecoin
Ethereum Classic
Aptos
Hedera Hashgraph
Immutable
Optimism
Arbitrum
VeChain
The Sandbox
Decentraland
Axie Infinity
Injective Protocol
Render Token
The Graph
Maker
Aave
Chiliz
Helium
PAX Gold
Compound
Lido DAO Token
THORChain
Stacks
Arweave
Sui
Conflux Network
Lido Staked ETH
Bitget Token
Wrapped Ethereum
OKB
Uniswap
Pepe
Ondo
Mantle
First Digital USD
Bittensor
Kaspa
Celestia
XDC Network
Artificial Superintelligence Alliance
Jupiter
Quant
Worldcoin
PayPal USD
Bonk
Flare
Tether Gold
Sei
JITO
JasmyCoin
PancakeSwap
Core
Floki Inu
Ethereum Name Service
SushiSwap
Kava.io
1inch Network
Tezos
Algorand
Flow
Trust Wallet Token
Curve DAO Token
KuCoin Token
MultiversX
Gitcoin
Zcash
IOTA
Basic Attention Token
Frax
Ethena
Ethena USDe
Fasttoken
Pi Network
SATS
Adventure Gold
Audius
Alchemy Pay
Arkham
API3
Bounce Token
Altlayer
Aergo
Amp
Aevo
ARPA Chain
Astar
Ark
Ankr
AirSwap
Alpaca Finance
Blur
Badger DAO
Bancor
BakeryToken
Biconomy
Chromia
Celer Network
Celo
Shentu
Civic
Convex Finance
Cartesi
Cyber
COTI
DigiByte
DIA
ether.fi
FUNToken
FLUX
Firo
Ampleforth
Golem
GMX
Gnosis
Moonbeam
Holo
IoTex
ICON
Illuvium
JUST
Kadena
Liquity
Livepeer
Lisk
Memecoin
Manta Network
Treasure
Mask Network
MetisDAO
Origin Protocol
ORDI
Ontology
Osmosis
Powerledger
Phala Network
Pendle
Portal
Pyth Network
ConstitutionDAO
Polkastarter
Qtum
iExec RLC
Rocket Pool
Reserve Rights
Ronin
Ravencoin
Starknet
Storj
Status
Spell Token
Sun (New)
SuperVerse
Toko Token
Theta Fuel
Tellor
Tensor
LayerZero
Usual
Eigenlayer
Hamster Kombat
Catizen
Berachain
KAITO
Pudgy Penguins
Solayer
Bio Protocol
ChainGPT
Cookie DAO
Solv Protocol
Alchemix
Bitcoin SV
Movement
DeXe
Binance Staked SOL
Nexo
Wrapped eETH
Hyperliquid
Casper
Zilliqa
Secret
Nervos Network
TrueUSD
BitTorrent
Mina
Dash
STEPN
Gemini Dollar
UNUS SED LEO
Synthetix
APEcoin
Gala
Theta Network
Fantom
Cronos
Internet Computer
Binance USD
According to ZachXBT’s timeline, Kapllani Jr.’s alleged activity stretches back to at least 2025.
ZachXBT linked multiple high-confidence thefts totaling more than $5.8 million to an Ethereum wallet allegedly controlled by Kapllani Jr.
Rather than exploiting smart-contract bugs, Kapllani Jr.’s attacks reportedly relied on social engineering — tricking victims into voluntarily giving up wallet access or sensitive information.
Several Bitcoin and Ethereum addresses tied to those thefts were later traced, moving funds through laundering services.
The latest being at the time of writing.
A wallet linked to Kapllani Jr. transferred $2.59 million (1.99 million DAI and 259 ETH) to another dormant wallet.
The investigation into Kapllani Jr. gained momentum in January 2026 after a separate crypto figure known online as “Lick” publicly exposed one of Kapllani Jr.’s older wallet addresses during a dispute on Telegram.
That caught attention because ZachXBT was already investigating Lick (identified as John Daghita) over a separate $46 million crypto theft allegedly tied to US Marshals Service seizure wallets.
French authorities and the FBI later arrested Daghita in Saint Martin during a joint operation.
The biggest moment in the investigation came after a March 2026 Bitcoin theft involving 185 BTC worth roughly $13 million at the time.
According to ZachXBT, about $5.3 million from that theft later moved into an Exodus wallet allegedly controlled by Kapllani Jr.
Then came what investigators describe as the critical mistake.
On April 23, during another Discord “band 4 band” call, Kapsdllani Jr. allegedly screen-shared the same wallet while showing off roughly $3.68 million in crypto alongside videos of luxury cars, private jets, jewelry, and nightlife.
7/ Dritan lives an extravagant life, regularly posting to Instagram and sharing it with other threat actors on Telegram. pic.twitter.com/IGyAmqIVVM
— ZachXBT (@zachxbt) May 12, 2026
ZachXBT later obtained the recordings and posted clips in the thread.
The wallet balances shown on-screen allegedly matched funds tied to the March Bitcoin theft and earlier 2025 activity.
The story escalated further on May 11, when US authorities unsealed a criminal complaint against 19-year-old Canadian national Trenton Johnson.
Prosecutors charged Johnson with conspiracy to commit wire fraud and money laundering tied to the 185 BTC theft.
In the complaint, prosecutors identified Kapllani Jr. as “Co-Conspirator 1,” though he has not been formally charged as of May 15.
The filing gave ZachXBT’s public investigation far more credibility by independently confirming some of the wallet flows and the alleged connections already discussed online.
The complaint also referenced additional laundering activity tied to Miami-based businesses and crypto figures allegedly connected to the same network.
The case highlights a growing reality inside crypto crime investigations.
Blockchain transactions may be pseudonymous, but public behavior often becomes the weak point.
Luxury social media posts, Discord calls, Telegram disputes and careless wallet exposure continue to help investigators connect digital evidence to real-world identities.
It also reflects how sophisticated social-engineering thefts have become.
Unlike traditional smart-contract exploits, many modern attacks rely on impersonation, insider information and psychological manipulation to convince victims to transfer assets willingly.
For now, Kapllani Jr. remains an uncharged co-conspirator publicly identified through ZachXBT’s reporting and the federal complaint.
Insha Zia is the News Editor at CCN. Based in Dubai, United Arab Emirates, he ensures the CCN newsroom provides value to readers by educating, informing, and engaging them with accurate and timely coverage.
Before joining CCN, Insha was a Senior Journalist at DailyCoin, where his career in crypto journalism took off. At DailyCoin he garnered ample experience by covering some of the biggest news in the crypto industry, especially in the Cardano ecosystem, and maintain solid relations with KOLs in the industry.
Insha has worked as a ghostwriter and a developer for three years. He has co-authored numerous articles in reputable publications, including Hackernoon, Yahoo Finance, and Nasdaq. He also has experience as a Solidity Developer and a Data Analyst.
Insha’s developer and journalist backgrounds go hand in hand when educating readers on technically complex concepts within the crypto space. He values accuracy, transparency, and delivering valuable insights to his readers.
Insha firmly believes education can propel the mass adoption of the crypto space. He is committed to giving CCN readers a greater understanding of the technology using his technical background.
Insha earned a Bachelor of Science in Computer Systems Engineering at the University of Engineering and Technology, Peshawar, in 2022. His technical foundation includes expertise in quantitative and qualitative research, data analysis, programming languages, and cybersecurity.
His comprehensive skill set enables him to communicate complex concepts to crypto readers with authority and clarity, making his articles both informative and engaging for his audience.
Insha is determined to take CCN to the top of the industry. When he’s not working on his next article or editing, Insha enjoys playing video games, mainly in FPS and MMORPG genres. He also loves playing soccer and has supported Arsenal since he was six.
You’re All Set!
Thanks for signing up. We’ll be in touch soon with the latest insights.
