⚡️👀 BIG - The GTA 6 hacker came up with the craziest contact system I've ever seen I checked out the website of Cyberleek, the GTA 6 hacker, and he’s clearly no amateur. I’m convinced this isn’t just one person, but actually a group of hackers. His contact system works in two steps: - First, he generates a Session account (secure, anonymous, and decentralized messaging) with a unique recovery phrase. This gives anyone who wants to contact him a disposable, end-to-end encrypted communication channel. - Next, he generates a donation amount in Monero (XMR), an anonymous cryptocurrency. Unlike Bitcoin, Ethereum, or Solana, its blockchain is private, and transaction amounts are completely obfuscated. Therefore, no one can see how much you sent except the person who holds the private key (Cyberleek). He asks for 400 XMR ($165,000), but what’s really interesting are the numbers AFTER the decimal point. There are 12 decimal places that are generated at the same time as the Session ID and serve as a unique identifier. When you send exactly that amount, Cyberleek detects the transaction on the blockchain, extracts the decimal places, recalculates the corresponding Session ID, and contacts you. According to the website, this is purely a client-side mathematical/cryptographic process. The page generates a 12-digit ID that is mathematically linked to the Session account. Since Monero hides the amounts, only Cyberleek can decrypt the amount received and retrieve your Session ID. No server storage of the ID is required before payment. It also specifies that you must send the funds from a personal wallet (Cake Wallet, Feather, etc.) and not from an exchange; otherwise, the decimals may be rounded, and it will never be able to track you down. I think it’s a rather elegant system, and the infrastructure itself is just as sophisticated. Their website can’t really be taken offline permanently, since it’s hosted decentralized on Arweave (permanent, immutable storage on the blockchain) and its content is accessible via numerous gateways on the ar(dot)io network. These gateways are access points that serve the same HTML file stored on Arweave. Taking down one gateway (or even several) makes almost no difference, since the site will remain accessible through all the others, and new mirrors can appear within minutes. All these factors lead me to believe that Cyberleek is a group rather than a single person, and given their modus operandi, that they are professionals. Their knowledge of cryptography and the use of decentralized technologies suggests that they are far from mere script kiddies or hackers who rely solely on social engineering. There is genuine technical expertise at play here. The somewhat childish/trolling aspect might suggest otherwise, but there’s no doubt about their technical expertise. The same goes for how they manage their communication: everything goes through their website. They deliberately avoid any social media platforms that could leave logs and compromise their identity. image

Replies (13)

I tried the cake wallet and send some satoshis to swap… now all is gone… just getting some error messages… what a shit show.. Never happened with btc and btc Lightning… Maybe monero is untraceable and all, but the tech sucks if that is one of the best products out there for it. Seems fishy… not superior at all. Anyone any idea how that could happen?
Seems like your issue is related to sats and swap, not to Monero itself which works perfectly on Cake or any other Monero wallet...
MrWonderland's avatar
MrWonderland 4 days ago
Sounds like a swap provider problem. Have you tried contacting Cake or the swap provider you used about that?
freQniK's avatar
freQniK 4 days ago
This should signal to you that Session and Monero are THE way to protect your transactions from the state whether they be white, grey, or black
Ralph's avatar
Ralph 3 days ago
Could someone explain the 12 decimal to Session ID piece? Is the website generating the Session ID, prompting the potential “donor” to jot down the phrase to “recover” on their end? Is the 12 decimal then generated by some cryptographic function of the aforementioned Session ID or the phrase? If so, how’s it then calculated back from decimal to phrase/ID? I’m not an expert in cryptography 🙃 but very curious.