An anonymous hacker who spent nine days leaking unreleased Grand Theft Auto VI footage cashed out more than $250,000 from a self-created memecoin on Thursday, dumping the entire position just hours before Rockstar Games was set to unveil its first official gameplay showcase.
The hacker, operating under the CyberLeek persona, had watermarked leaked GTA 6 clips with the Solana-based token’s branding and contract address, tying future releases to the coin’s market capitalization with the tagline “higher market cap = more leaks.” The strategy briefly pushed CYBERLEEK to a market value of roughly $25 million on Aug. 23, a more than 14-fold surge in a single day.
Nine-Day Leak Campaign Timeline
| Date (2026) | Event |
|---|---|
| Aug. 14 | CyberLeek’s domain registered, days before any leak surfaced |
| Aug. 15 | CYBERLEEK begins trading on Solana at a fully diluted valuation near $55,000 |
| Aug. 18 | First leaked clips posted, watermarked with QR codes linking to the token |
| Aug. 19 | Stop Killing Games publicly disowns CyberLeek, warns fans not to buy the token |
| Aug. 20 | Additional footage released after a token-weighted community poll |
| Aug. 22 | Federal judge approves Take-Two subpoenas against Microsoft and Discord; CyberLeek burns 270 million tokens |
| Aug. 23 | CYBERLEEK market cap peaks near $25 million, a 14-fold one-day surge |
| Aug. 27 | Deployer wallet cashes out more than $250,000; Rockstar and Netflix premiere the Extended Look hours later |
Onchain data analyzed by blockchain researchers showed the contract owner claimed approximately $146,000 in wrapped Solana tokens plus 15.4 million CYBERLEEK tokens in creator fees, then sold the entire allocation for about $125,000 in SOL in a single transaction. Independent investigators, including GTAForums user “Vice Cit” cited by Dexerto, estimated total proceeds at between $250,000 and $270,000.
The funds were split across four newly created wallets, with at least 91 SOL routed to KuCoin. The exchange’s know-your-customer requirements mean the funding trail could potentially lead authorities to the person or group behind the operation.
Token Collapse and Community Fallout
CYBERLEEK plunged roughly 46% in the 24 hours following the cash-out, falling from a peak of $0.0344 to around $0.0097, according to CoinGecko data. The token’s market capitalization dropped to approximately $7 million, while daily trading volume remained elevated at $13 million to $18 million. Roughly 730 million tokens continued circulating across an estimated 68,000 to 78,000 wallets.
The sell-off renewed accusations that the entire operation was a rug pull, though the tokens sold Thursday reportedly came from trading-volume-based fees rather than the developer allocation. CyberLeak had sought to preempt those allegations on Aug. 22 by burning 270 million tokens, or about 27% of the original supply, with one subsequent leak carrying the message: “To prove you wrong all dev tokens were just burned, now only collecting trading fees.”
The anonymous account has framed the campaign as a protest against practices including digital-only releases and monetization, while threatening further leaks unless Rockstar responds to its demands. Whether CyberLeak represents one person or a group remains unknown.
Coin First, Leak Second: What On-Chain Forensics Show
A blockchain forensics investigation published by Bitquery complicates the narrative that a rogue leak spawned an opportunistic memecoin. According to the analysis, the group’s domain was registered on Aug. 14, and CYBERLEEK’s Solana contract began trading on a Raydium liquidity pool the next day, Aug. 15, at a fully diluted valuation near $55,000. The first leaked clips did not appear until Aug. 18, arriving with QR codes linking to the token and site burned directly into the watermark. The analysis concluded the sequence of registrations does not by itself prove a single actor executed every step, but noted the token’s launch preceded its advertisement by three days.
The Aug. 18 leak also triggered a separate windfall from the one later scrutinized in the Aug. 27 cash-out. The same investigation identified five wallets that bought CYBERLEEK within a six-minute window of the first leak’s posting, 17:48 to 17:54 UTC, and realized a combined roughly $158,000 in trading profits within hours. None of the five wallets traced back to the deployer address, suggesting opportunistic snipers rather than insiders captured a separate share of the proceeds. Across the following seven days, the token’s main liquidity pool turned over $22.7 million in trading volume across more than 163,000 transactions and 16,000 distinct wallets, before the price settled roughly 60% below its Aug. 18 peak.
Stop Killing Games, a digital-rights campaign focused on game preservation whose demands over ending digital-only releases overlap with CyberLeek’s stated grievances, publicly disowned the group on Aug. 19 for using the leak to promote a meme coin. Its director general, Moritz Katzner, told supporters in a statement later reported by Kotaku: “Do not send these people your money.”
Legal Response and Financial Stakes
Take-Two Interactive (TTWO), Rockstar’s parent company, has moved aggressively on the legal front. Federal judges granted subpoenas against Discord, Microsoft (MSFT), and X seeking identifying data on CyberLeak and associated accounts, according to a report by CoinDesk.
The Aug. 27 cash-out is not the first time a GTA 6 leak has drawn a serious legal response. In September 2022, an 18-year-old member of the Lapsus$ hacking group, Arion Kurtaj, breached Rockstar’s internal Slack using only a hotel-room Amazon Fire Stick, TV and phone while out on bail for an earlier breach of Uber, then posted 90 clips of unreleased GTA 6 footage along with source code to a fan forum. A London court found him unfit to stand trial due to severe autism and, in December 2023, ordered him detained indefinitely in a secure hospital. That order has since been reversed: Kurtaj was transferred to a conventional prison in mid-2026 after a medical reassessment found him fit to stand trial, and he now faces a retrial in November 2026, the same month Take-Two plans to launch the game he leaked four years earlier.
| 2022 leak (Lapsus$) | 2026 leak (CyberLeek) | |
|---|---|---|
| Entry method | Social-engineered breach of Rockstar’s internal Slack | Anonymous leak watermarked with a pre-launched memecoin |
| Stated motive | Notoriety, part of a wider extortion spree | Protest against digital-only releases; funded by token sales |
| Financial angle | None identified | More than $250,000 cashed out before the leaker’s own token crashed |
| Legal status (Aug. 2026) | Retrial set for November 2026 after hospital order reversed | Federal subpoenas issued against Discord, Microsoft and X |
Rockstar broke its silence on the leaks Wednesday, calling the situation “heartbreaking for the team” and saying the unauthorized footage was “not how we intended for you to see the game after all this time.” The studio’s planned rollout remains on schedule.
The stakes for Take-Two are substantial. The company has guided to $8 billion to $8.2 billion in fiscal 2027 net bookings largely on the strength of GTA 6, with analysts projecting up to 45 million copies sold in the launch window. For context, GTA V has sold roughly 230 million lifetime units and generated more than $11 billion in revenue since 2013.
GTA 6 is scheduled to launch on Nov. 19, 2026. Netflix premiered a 26-minute “Extended Look” at the game on Aug. 27, captured entirely from in-game footage, with a YouTube release scheduled later that day.
Security researchers noted the attack followed a familiar playbook, using daily drip leaks to maximize pressure while the memecoin converted audience attention into cash throughout the campaign. The convergence of onchain forensics, exchange KYC requirements, and federal subpoenas suggests this case may mark a turning point in how the gaming industry pursues accountability for digital asset-related crimes.
Source link
Author
- Ytv Market News
- Share-market news writer and analyst with deep experience covering equities, commodities, forex, and cryptocurrencies for readers in the USA, UK, Canada, and Australia. Ytv Market News delivers timely market updates, practical trading insights, and clear explanations of macro and company-level catalysts that move prices. Combines on-the-ground financial reporting with technical analysis, using concise charts and actionable ideas to help investors and traders make smarter decisions.
Latest entries
Crypto NewsAugust 28, 2026Building a Trust System in the Age of AI Trading
Investing InsightsAugust 28, 2026How Strong Q2 Beat And Raised 2026 Guidance At IQVIA Holdings (IQV) Has Changed Its Investment Story
Investing InsightsAugust 28, 2026Economic Calendar – Waiting for Jackson Hole and ECB meeting minutes
Credit Cards USAAugust 28, 2026Amex Tops Credit Card Satisfaction as Financial Stress Deepens
