Hacked, Bundled, and Laundered: The Crypto Heist That’s More Confusing Than a Liz Lemon Daydream

by

Because Who Doesn’t Love a Good Cat Meme Gone Wrong?

On May 11, Keith Gill’s Roaring Kitty account-dormant for 16 months-suddenly woke up like it was a Mean Girls burn book. It posted a Pump.fun contract for a Solana memecoin called Red Kitten Crew ($RKC), complete with a cartoon cat in a bandana. Because nothing says “financial genius” like a feline in accessories.

The token surged to a $12 million market cap in 20 minutes. Then, poof! Posts deleted. GameStop stock spiked 13% before crashing harder than Jenna Maroney’s solo career. Gill? Radio silent. Probably hiding in a bush somewhere.

Specter found 11 hacker wallets involved, with the mastermind spending just $1,950 to make $600,000. That’s a better ROI than NBC’s investment in The Rural Juror. The money was then laundered faster than Liz Lemon can eat a ham sandwich.

Connecting the Dots: Because Even Criminals Love a Good Crossover Episode

Specter’s big reveal? The same group hacked Matt Furie’s account (yes, the Pepe the Frog guy) and WinRAR’s account. Because why stop at one meme when you can have a whole buffet? The Matt Furie hack involved a BNB Chain Pepe token with a 2% tax-basically a “please steal my money” sign.

The WinRAR hack? Same playbook. Post a Solana contract, collect fees, and disappear like a Tracy Jordan one-liner. Specter traced the wallets and found they’re all connected, like a bad romantic comedy where everyone ends up dating each other.

The bnbshare[.]fun Connection: Because Every Scam Needs a Launchpad

Enter bnbshare[.]fun, a BNB Chain token launchpad developed by @aliasbacardi. Fees from their $SHARE token were routed to a wallet that later bridged money to the Roaring Kitty hacker’s wallets. Coincidence? Probably not. @aliasbacardi’s account is now wiped clean, which is about as suspicious as Jack Donaghy’s “business trips.”

$14 Million in Profits: Because Crime Does Pay (Until It Doesn’t)

Specter traced the group’s wallets to a bunch of bundled scam tokens with names like $USOR and $VDOR. These tokens were promoted by “cheap KOLs” (aka influencers who’ll shill anything for a paycheck). The charts? Obvious scams. The followers? Exit liquidity. It’s like a 30 Rock writers’ room meeting-chaotic and no one’s winning.

The Phishing Link: Because Why Stop at Memes When You Can Steal Millions?

Specter also connected the group to a 2024 phishing attack that stole $2.45 million in wstETH. Because why be a one-trick pony when you can be a full-on criminal enterprise? The laundering infrastructure spans five chains, making it harder to track than Kenneth’s backstory.

The Celebrity Account Pipeline: Because Fame Is Just a Hack Away

The group’s MO? Compromise high-follower accounts, launch scam tokens, and launder the money faster than Liz Lemon can say “night cheese.” Roaring Kitty, Matt Furie, and WinRAR are just the tip of the iceberg. No arrests yet, but @aliasbacardi’s account is gone, and the victims are quieter than a 30 Rock finale.

Moral of the story? Crypto is wild, hackers are ruthless, and I’m still waiting for my own spin-off show. Until then, stay vigilant and keep your memes to yourself.

Read More

2026-05-16 14:01