ZachXBT Exposes Canadian in $2M Coinbase Crypto Thefts

Blockchain investigator ZachXBT has exposed a Canadian individual accused of stealing more than $2 million in cryptocurrency from Coinbase users over the past year through impersonation scams. The suspect, who operated under the aliases Haby or Havard and is believed to be based in Abbotsford near Vancouver, British Columbia, used social engineering tactics to deceive victims into granting access to their accounts.

ZachXBT detailed his findings in a series of posts, drawing on screenshots from private Telegram group chats, social media activity, and onchain transaction analysis. The investigation began with a December 30, 2024, post where the suspect boasted about stealing 21,000 XRP, valued at approximately $44,000 at the time, from a Coinbase user's account. By matching the wallet address shown in the screenshot to historical balances, ZachXBT linked it to two additional Coinbase-related thefts, bringing the traced amount to about $500,000.

The suspect frequently converted stolen XRP to Bitcoin via instant exchange services to obscure the funds' trail. Timing analysis of these swaps revealed a specific Bitcoin address tied to the operation. In February 2025, the suspect shared...