When ZachXBT publicly announced he was sitting out the investigation into the massive Coldcard hardware wallet exploit, he put into words a specific kind of exhaustion that builds up after years of doing unpaid, high-stakes work for an industry that only remembers to say thank you when it needs something.
And instead of the usual deflection, he explained exactly why, complete with receipts of people who promised to pay him and then didn’t.
The Question That Started It
It began with a simple, half-joking question from a follower wondering aloud whether ZachXBT was on holiday, or just deep in the weeds tracing UTXOs from the Coldcard theft. I think most people expected the usual answer, since ZachXBT has built his entire reputation tracing exactly this kind of theft.
Instead, he answered directly and without softening it: he has no current plans to monitor or trace the Coldcard incident at all. No hedging, no “I’m looking into it.” Just a flat no, followed by the reasoning that I think is genuinely worth sitting with.
“Bitcoin Maxis Are Not Donors”
ZachXBT explained that his time is focused on ecosystems that actually value his work, and that Bitcoin maximalists, in his framing, aren’t donors or supporters, which he said reduces his sense of obligation to help. He added that he’s no longer particularly interested in spending time on complex cases just to receive what amounts to a pat on the back.
I think it’s easy to read that as harsh, especially aimed at victims of a genuinely devastating theft that’s now climbed past $88 million across thousands of addresses. But I don’t think that reaction fully accounts for what he’s actually describing, which isn’t indifference to victims. It’s a pointed critique of an ecosystem that happily consumes free investigative labor while rarely funding the infrastructure that makes that labor possible in the first place.
The Case That Broke His Trust
To back up the claim that this isn’t just fatigue talking, ZachXBT laid out two specific examples of being burned after helping people for free. The first involved a user going by Roshii, also known as Zatoshi, who was scammed for $600,000 in June 2026 and told ZachXBT they’d pay whatever fee he asked.
He spent more than five hours tracing the funds and successfully froze $96,000 total, a genuinely meaningful recovery by any standard. But the victim then refused to file a police report in Denmark, reportedly because he hadn’t been paying taxes and didn’t want that scrutiny. When ZachXBT asked for $5,000 in compensation for the work, he says he’s been ghosted for weeks since.
I think this specific detail matters more than it might seem at first. A victim who’s willing to accept recovered funds but not willing to engage with the legal process needed to actually pursue accountability, and then disappears when asked to pay for the work that got them that partial recovery, is exactly the kind of pattern that would erode anyone’s willingness to keep doing this unpaid.
A Second Broken Promise, Nine Months Running
The second example is arguably worse. A project offered ZachXBT a $25,000 bounty for an in-depth review of its team members’ on-chain history, after it turned out the project had unknowingly hired North Korean IT workers who went on to exploit it. ZachXBT completed the work. The project has reportedly been telling him for nine months that it cannot pay.
He said he’s given them a final 30-day reminder before naming them publicly, which I think tells you exactly how much patience he’s already extended. Nine months of “we can’t pay” after receiving a completed, high-stakes investigative deliverable isn’t a cash flow problem. It’s a company treating a specialist’s labor as optional once the immediate crisis has passed.
Why This Matters Beyond One Investigator’s Patience
I think the temptation here is to treat this as a personality story, ZachXBT having a frustrated moment on social media. I don’t think that’s the real story. The real story is what happens to an entire ecosystem’s security posture when the people capable of tracing stolen funds, freezing assets, and identifying bad actors are expected to do that work for free, indefinitely, with no recourse when the people they help simply decide not to pay afterward.
Investigative work at this level isn’t a hobby. It requires real technical skill, real time, and increasingly real personal risk, given how visible figures like ZachXBT have become targets themselves. Treating that labor as a public good that anyone can tap into without consequence for non-payment isn’t sustainable, and I think this Coldcard refusal is the clearest, most direct evidence yet of that model breaking down in real time.
What This Says About Crypto’s Free Labor Problem
I don’t think ZachXBT declining to trace the Coldcard incident should be read as him abandoning victims out of spite. I think it should be read as a warning shot to an industry that’s built an entire informal safety net on the assumption that a handful of dedicated, unpaid investigators will always show up when something goes wrong. The Roshii case and the nine-month unpaid bounty aren’t outliers he’s citing for sympathy. They’re evidence that the current arrangement genuinely doesn’t work, and that goodwill alone isn’t infinite.
If crypto wants investigators like ZachXBT to keep showing up for the next major theft, I think the uncomfortable lesson here is that the industry needs to build real, enforceable compensation structures for this kind of work, rather than continuing to rely on reputation and moral pressure to extract free labor from the same handful of people every single time something breaks. Right now, at least for the Coldcard theft, that model has run out of road.
Disclosure: This is not trading or investment advice. Always do your research before buying any cryptocurrency or investing in any services. Follow us on X @nulltxnews
Be the first to comment