ZachXBT Ties M1llionz to $93K Tether Freeze in France

ZachXBT posted the 11-part thread on X at roughly 11:59 UTC. He linked the alias M1llionz, also called RichMilly666, to a trail of stolen Bitcoin and Ether. He also flagged a long history of openly posting about bank and retail fraud on social media.

What ZachXBT Says M1llionz Did

The first robbery happened on April 17, 2026. According to ZachXBT, five attackers stormed a home and stole about 7.2 BTC, worth roughly $557K at the time. Several people were hospitalized after the attack.

The second robbery followed on April 20, 2026. Attackers tied up a victim and threatened them until they handed over about $110K in crypto. That haul came to roughly 46 ETH.

ZachXBT tied each theft to a specific wallet. The Bitcoin left address bc1qrdq5acl9nw4gt3cjte2629lw9qcg9xxkf3x02k, while the Ether came from 0x3000d2a2ef9bd8b614b368408768a6e25bf4de0f. These claims remain investigative allegations, and no court has ruled on them.

Following the Stolen Bitcoin On-Chain

The laundering started with a chain swap. According to ZachXBT, the stolen Bitcoin moved to Ethereum through Chainflip, a cross-chain bridge. Bridging changes the network and makes a direct trace harder.

From there, about $317K flowed through three KuCoin deposit addresses. ZachXBT then matched the timing of deposits and withdrawals. Those withdrawals consolidated at address 0xe744d8890792eb4b51ac6565e3d409076b62b302.

The second robbery followed a similar route. Its ETH also bridged to Ethereum and passed through a KuCoin deposit address. A matching withdrawal landed at 0x5fb7194cc893cdc8339fa1bd7e8b52cdb3d3d075 and again consolidated at the same 0xe744 wallet.

Next, about $108K moved to 0x3c4f6ca9bea79432eaf8d98c3be4570064f1fde8 and swapped ETH for USDT. Crucially, gas for that wallet came from the April 20 victim address. A separate batch converted to Monero through two instant exchanges and a service called Wagyu.

How the $93K Tether Freeze Happened

Then ZachXBT reported the movements to Tether and law enforcement. As a result, Tether froze $93K in USDT at address 0x47967fe27f07fb54e9f4daa2541c0f75e27ddde7. The freeze is tied directly to these attacks so far.

This step matters because of how USDT works. Tether can freeze tokens at the contract level once it receives strong on-chain evidence. The holder still owns the tokens, yet they cannot move them.

Privacy coins tell a different story. Because Monero hides transaction details, the funds routed through it are far harder to trace or freeze. So the USDT freeze captured only part of the stolen value. The rest may stay out of reach.

The OSINT Trail Behind the M1llionz Alias

ZachXBT paired the on-chain work with open-source clues. According to him, M1llionz ran a Telegram channel called EMPIRE that promoted bank fraud services. The same account showed off hotels, flights, cars, and designer goods while blurring his face.

Some of the strongest links came from the suspect himself. ZachXBT says M1llionz posted screenshots of his own Exodus wallet activity. One wallet received 1.44 ETH from the April 17 path, and another received about 12.28 ETH from the consolidation address.

A posted video reportedly showed 22.37 ETH leaving the April 20 path. ZachXBT also listed several emails and aliases from his research. Still, no source has publicly confirmed the real person behind the pseudonyms, so the identity remains unproven.

A Wider Wave of Violent Crypto Robberies

The case fits a grim trend. France and the wider EU have seen a rise in violent, in-person crypto theft during 2025 and 2026. Investigators often call these “wrench attacks” because they target holders directly.

ZachXBT says he prioritizes home-invasion cases for this reason. He also claims he has frozen multiple seven figures across US and EU incidents. In this thread, he noted two more attacks sitting within two hops of the same OTC addresses.

For crypto holders, the lesson is practical. Physical security now matters as much as key management. This is not financial advice, but operational caution can lower the risk of becoming a target.

What Comes Next in the M1llionz Case

Much of the story is still open. No arrests, charges, or French police documents have been confirmed against M1llionz or RichMilly666. Tether and the accused have not commented beyond the freeze itself.

Secondary coverage so far mirrors the thread. Outlets such as CryptoBriefing and Cointelegraph repeated the figures without independent verification. That gap could close if authorities open a formal case.

For now, watch three things. First, whether more freezes follow the initial $93K. Second, whether French investigators act on the wallets. Third, whether the two further attacks flagged by ZachXBT surface in a new report. Until then, treat every claim here as an allegation.