ZachXBT has identified the Hyperliquid whale behind a series of high-risk trades
He turned out to be a British citizen who had previously been convicted of fraud
21.03.2025 - 10:25
486
4 min
0
What’s new? An anonymous blockchain analyst under the nickname ZachXBT, known for his investigations into hacking and fraud in the crypto space, has identified the trader behind a series of high-risk trades on decentralized exchange (DEX) Hyperliquid.
What else is known? According to the analyst, this trader is UK citizen William Parker, previously convicted of financial crimes in his home country and Finland, and he used stolen funds for the trades.
Parker’s activities caught the attention of the crypto community due to a series of aggressive leveraged trades on Hyperliquid between January and March. In his anonymous X account @qwatio, he claimed that these trades generated nearly $20 million in profits.
Blockchain analyst ZachXBT spoke about the lack of payments from US authorities for assistance in crypto hacking investigations
Anonymous has repeatedly assisted law enforcement to seize tens of millions of dollars worth of stolen digital assets
ZachXBT pointed to two major trades: a large long position in ETH and BTC with 50X leverage just before the publication of Donald Trump’s executive order creating a national crypto reserve, which brought in $10 million. There was also a large BTC short position with 40X leverage with a $9 million profit.
The analyst also noted that the X account was not originally owned by Parker and was bought out by him at some point for his use, given the recent nickname change and years of inactivity.
In addition, Parker’s X is subscribed to the @CryptxxCatalyst account, which posted links to phishing websites on his page and in repayments to other users in an attempt to defraud them.
ZachXBT was further able to determine that Parker’s public address on Hyperliquid was listed as a payout recipient on one of these phishing sites. That address turned out to be linked to another that received withdrawals from four unnamed casinos, one of which Parker received funds from using an exploit.
ZachXBT analyst talks about the $8 million exploit of the Noones P2P marketplace
The platform was attacked back at the beginning of the year, but the developers did not report it publicly
The team at that casino provided ZachXBT with the Telegram account of the exploiter they were negotiating with to recover the funds. Using OSINT, the analyst found the trader who was receiving the payment from Parker and was able to provide his cell phone number, which led to his identity.
According to ZachXBT, he was arrested and convicted in Finland for stealing $1 million from two casinos in 2023. He was previously known as Alistair Packover/William Peckover, but then changed his name. In addition, back in the early 2010s, AP wroteabout his gambling-related fraud and hacking.
According to blockchain analytics platform Arkham Intelligence, a wallet linked to Parker currently holds more than $23 million in digital assets.
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026

Telegram
Twitter