Crypto.com Faces New Scrutiny as ZachXBT Challenges CEO’s Leak Claims
Crypto.com is once again under the microscope after blockchain investigator ZachXBT accused CEO Kris Marszalek of minimizing the scope of a 2023 data breach.
Marszalek insisted on Sunday that the incident, first reported by Bloomberg, had been contained within hours, with no user funds lost and only a “limited” amount of partial personal data affected.
He argued that regulators, including the Nationwide Multistate Licensing System & Registry (NMLS), were fully informed and dismissed suggestions of underreporting as “misinformation.”
Since the Cryptocom CEO Kris blocked me I cannot reply to his post and will just reply here.
Should be easy for you to link the URL to where these incidents were PUBLICLY disclosed then?
User balances, names, emails, & phone numbers leaked from other incidents is a bit more… pic.twitter.com/fvp6j3q1rr
— ZachXBT (@zachxbt) September 22, 2025
ZachXBT, however, disputed this version, claiming the leak exposed far more than partial data. According to him, wallet contents, ID documents, emails, and phone numbers were among the compromised details. He also challenged Marszalek to provide a public disclosure link if such reporting had been properly filed.
The controversy escalated when Bloomberg cited a hacker from the group Scattered Spider, who claimed to have gained access by socially engineering a Crypto.com employee. Following ZachXBT’s posts, Marszalek blocked him on X, as speculation mounted about an even larger undisclosed breach. The sleuth suggested that stolen funds could be tied to the leak but withheld specifics for now.
With questions lingering over both the extent of the breach and the transparency of the exchange’s reporting, Crypto.com faces renewed doubts about its security practices.

Fill in necessary fields and publish