{"id":23020,"date":"2026-09-02T07:15:01","date_gmt":"2026-09-02T07:15:01","guid":{"rendered":"https:\/\/cryptoted.net\/index.php\/2026\/09\/02\/gta-vi-leaker-reportedly-cashes-out-350k-in-crypto\/"},"modified":"2026-09-02T07:15:01","modified_gmt":"2026-09-02T07:15:01","slug":"gta-vi-leaker-reportedly-cashes-out-350k-in-crypto","status":"publish","type":"post","link":"https:\/\/cryptoted.net\/index.php\/2026\/09\/02\/gta-vi-leaker-reportedly-cashes-out-350k-in-crypto\/","title":{"rendered":"GTA VI leaker reportedly cashes out $350K in crypto"},"content":{"rendered":"<p> <br \/>\n<br \/><img decoding=\"async\" src=\"https:\/\/media.crypto.news\/2025\/11\/crypto-news-Fragmented-liquidity-hack-crime-option03.webp\" \/><\/p>\n<div>\n<p class=\"is-style-lead\">Wallets associated with the CYBERLEEK memecoin moved approximately $350,000 generated through liquidity provider fees after unauthorized GTA VI footage drove attention toward the token, according to onchain analyst Conor Grogan.<\/p>\n<div id=\"cn-block-summary-block_1d6d916bf5c566ce6b8d0865c59bcc94\" class=\"cn-block-summary\">\n<p>\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/p>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>Onchain analyst Conor Grogan traced roughly $350,000 in withdrawals to wallets associated with CYBERLEEK activity.<\/li>\n<li>Grogan said the proceeds came from liquidity fees rather than large direct token sales alone.<\/li>\n<li>CyberLeek\u2019s controller remains publicly unidentified, and wallet analysis does not prove the operator\u2019s legal identity.<\/li>\n<li>Take-Two obtained federal subpoenas seeking Microsoft and Discord records connected to the unauthorized gameplay leaks.<\/li>\n<li>Microsoft and Discord were directed to produce requested records by September 4, court documents show.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<p>Grogan said on Sept. 1 that the funds passed through several over-the-counter providers. He attributed the wallets to the person or group responsible for the GTA VI leaks, but the controller\u2019s identity has not been confirmed publicly.<\/p>\n<p>The analyst\u2019s <a href=\"https:\/\/x.com\/jconorgrogan\/status\/2094774509500805297\" target=\"_blank\" rel=\"nofollow\">post<\/a> described the proceeds as coming entirely from liquidity fees rather than the operator selling a large CYBERLEEK allocation directly into the market.<\/p>\n<p>Take-Two Interactive, the parent company of GTA VI developer Rockstar Games, is separately using federal court subpoenas to identify accounts involved in publishing and distributing the leaked material.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<h2 class=\"wp-block-heading\"><strong>CYBERLEEK wallets collected trading fees<\/strong><\/h2>\n<p>CYBERLEEK launched on Solana on Aug. 15, according to publicly reported blockchain data. The project gained attention as an online account using the CyberLeek name released previously unseen footage from GTA VI.<\/p>\n<p>A liquidity provider supplies token pairs to a decentralized exchange pool. Traders use that pool to buy or sell an asset, paying fees that are distributed to liquidity providers based on the platform\u2019s rules.<\/p>\n<p>Grogan said the CYBERLEEK operator profited from that structure. Each release of unauthorized GTA VI material attracted attention, while the resulting token trades produced additional fees for the wallet supplying liquidity.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">The GTA 6 hacker, responsible for the Cyberleek coin,  has cashed out about $350k, entirely from LP fees. They have washed funds through a variety of OTC providers<\/p>\n<p>This is the first hacker that I&#8217;ve ever seen make money solely on liquidity provision (versus dumping a token) <a rel=\"nofollow\" href=\"https:\/\/t.co\/5czgluVKBn\">https:\/\/t.co\/5czgluVKBn<\/a> <a rel=\"nofollow\" href=\"https:\/\/t.co\/ABzjSjYAed\">pic.twitter.com\/ABzjSjYAed<\/a><\/p>\n<p>\u2014 Conor (@jconorgrogan) <a rel=\"nofollow\" href=\"https:\/\/x.com\/jconorgrogan\/status\/2094774509500805297?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The process did not require the operator to sell the bulk of the original liquidity position. Instead, the wallet could collect fees while traders continued exchanging CYBERLEEK through the pool.<\/p>\n<p>Grogan described the arrangement as the first instance he had observed in which a suspected hacker made money solely through liquidity provision rather than dumping a token. His statement reflects his analysis of the wallet activity, not a finding by a court or law enforcement agency.<\/p>\n<p>The onchain data can show transfers, liquidity positions and fee withdrawals. It cannot independently prove who controlled the wallets or whether the same person obtained and released Rockstar\u2019s copyrighted files.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Wallet movements do not identify the GTA VI leaker<\/strong><\/h2>\n<p>The individual or group behind CyberLeek remains unknown. No court filing, police statement or Rockstar announcement has publicly connected a named person to the wallets examined by Grogan.<\/p>\n<p>Referring to the controller as the GTA VI hacker therefore goes beyond the currently established evidence. The available record shows that the CyberLeek alias distributed unauthorized footage and promoted a token carrying the same name.<\/p>\n<p>Grogan said the $350,000 passed through several OTC providers. These services can facilitate direct asset trades between counterparties without routing the full order through a public exchange.<\/p>\n<p>Using an OTC provider does not automatically prove money laundering. Grogan used the term \u201cwashed\u201d to describe the transfers, but no regulator or court has ruled that the funds constituted criminal proceeds or that the service providers knowingly processed illegal transactions.<\/p>\n<p>The distinction matters because blockchain attribution often relies on transaction patterns, address labels and links between wallets. Such methods can establish probable relationships, but they may not reveal the ultimate beneficial owner.<\/p>\n<p>The case resembles other memecoin structures in which locked or retained liquidity continues producing revenue for its creator. An explanation of <a href=\"https:\/\/crypto.news\/why-locked-liquidity-does-not-mean-a-token-is-safe\/?utm_source=chatgpt.com\" target=\"_blank\">how locked liquidity can still generate creator fees<\/a> shows why a token operator does not necessarily need to remove the pool or sell a large allocation to profit.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Take-Two pursues Microsoft and Discord records<\/strong><\/h2>\n<p>Take-Two filed Digital Millennium Copyright Act subpoena requests in the U.S. District Court for the Southern District of New York on Aug. 20.<\/p>\n<p>One proceeding, filed as In re Take-Two Interactive Software, Inc., case number 1:26-mc-00421, sought information from Microsoft. The court <a href=\"https:\/\/www.courtlistener.com\/docket\/74679284\/in-re-take-two-interactive-software-inc\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"nofollow\">docket<\/a> identifies GitHub as the Microsoft service that allegedly hosted copyrighted GTA VI material.<\/p>\n<p>Take-Two said the disputed material included proprietary software, audiovisual content, artwork, images and dialogue from GTA VI. The company requested information capable of identifying the alleged infringer or infringers.<\/p>\n<p>Related requests directed at Microsoft and Discord sought account identifiers, registration information, IP addresses, phone numbers and some device data connected to accounts that may have distributed or discussed the leaked footage.<\/p>\n<p>The orders directed the companies to produce the requested records by Sept. 4. Microsoft said it was working with Take-Two and Rockstar to protect their intellectual property.<\/p>\n<p>Discord said it would evaluate the validity and scope of any subpoena before responding. The company also said on Aug. 25 that it had not yet been served at that time.<\/p>\n<p>Obtaining identifying information does not establish that an account holder committed hacking, copyright infringement or another offense. The records could help Take-Two determine who operated an account, but further evidence would be needed to prove who acquired the footage.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Rockstar calls the GTA VI leaks \u201cheartbreaking\u201d<\/strong><\/h2>\n<p>Rockstar publicly addressed the leaks on Aug. 26, describing the unauthorized release as \u201cheartbreaking\u201d for developers who had worked on the game.<\/p>\n<p>The company said the footage was not how it intended the public to see GTA VI after years of development. Rockstar continued with its planned extended presentation on Aug. 27 rather than changing its marketing schedule.<\/p>\n<p>CyberLeek had released clips showing driving, combat and interactions involving GTA VI character Jason. The material appeared to come from an unfinished version of the game, although Take-Two has not publicly explained how the files were obtained.<\/p>\n<p>The leaks differed from Rockstar\u2019s 2022 security breach, when development footage from an earlier GTA VI build appeared online. The person convicted in connection with that incident has not been publicly tied to the current CyberLeek operation.<\/p>\n<p>Rockstar has not said the latest leaks changed GTA VI\u2019s development schedule. Its official <a href=\"https:\/\/www.rockstargames.com\/newswire\" target=\"_blank\" rel=\"nofollow\">Newswire<\/a> lists the extended presentation released after the unauthorized clips appeared.<\/p>\n<h2 class=\"wp-block-heading\"><strong>CYBERLEEK fee model leaves traders exposed<\/strong><\/h2>\n<p>Grogan\u2019s findings show how attention around leaked material can be converted into trading revenue without a conventional token sale by the creator.<\/p>\n<p>Memecoin prices can rise rapidly when an online event attracts traders. Liquidity providers benefit from higher transaction volume because each swap can produce fees, regardless of whether buyers ultimately make or lose money.<\/p>\n<p>The model can also align the token operator\u2019s revenue with continued controversy. More footage can produce more attention, while additional attention can increase trading volume and liquidity fees.<\/p>\n<p>Locked liquidity does not eliminate that incentive. A pool may remain available for trading while its creator continues claiming accumulated fees. Research into <a href=\"https:\/\/crypto.news\/how-meme-coins-are-made-bonding-curves-pump-fun-rug-pulls\/?utm_source=chatgpt.com\" target=\"_blank\">how memecoins generate revenue through bonding curves and trading<\/a> explains why direct token sales are not the only way insiders can profit.<\/p>\n<p>Grogan did not publish evidence proving that all $350,000 had been converted into fiat currency. His analysis showed funds moving through providers and described the activity as a cash-out.<\/p>\n<p>The next confirmed development could come after the Sept. 4 subpoena deadline. Records from Microsoft or Discord may help Take-Two identify people connected to the accounts, although such disclosures may remain confidential during the company\u2019s investigation.<\/p>\n<p>Until then, the blockchain evidence supports the finding that CYBERLEEK-linked wallets collected and moved substantial liquidity fees. It does not establish the legal identity of the controller or prove who obtained the GTA VI footage.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/crypto.news\/gta-vi-leaker-reportedly-cashes-out-350k-in-crypto\/\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wallets associated with the CYBERLEEK memecoin moved approximately $350,000 generated through liquidity provider fees after unauthorized GTA VI footage drove attention toward the token, according to onchain analyst Conor Grogan. Summary Onchain analyst Conor Grogan traced roughly $350,000 in withdrawals to wallets associated with CYBERLEEK activity. Grogan said the proceeds came from liquidity fees rather [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":23021,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[23],"tags":[],"kronos_expire_date":[],"class_list":["post-23020","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto"],"_links":{"self":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/23020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/comments?post=23020"}],"version-history":[{"count":0,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/23020\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media\/23021"}],"wp:attachment":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media?parent=23020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/categories?post=23020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/tags?post=23020"},{"taxonomy":"kronos_expire_date","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/kronos_expire_date?post=23020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}