The leaker behind this month’s Grand Theft Auto 6 footage dump appears to have finally shown its hand. On August 27, 2026, blockchain investigators traced roughly $270,000 in transactions out of wallets linked to the anonymous group known as Cyberleek, the same entity that spent the previous two weeks flooding the internet with GTA 6 gameplay clips branded with a Solana memecoin called $CYBERLEEK. Within hours of the transfers, the token’s price collapsed by as much as 86%, according to Kotaku, effectively ending a scheme that had, for a few days in late August, turned one of the most anticipated video games in history into the marketing engine for a crypto pump-and-dump.
The story is now confirmed across multiple outlets, including Wolf’s Gaming Blog, PC Gamer, Kotaku, IGN, GameSpot and crypto-focused publications like Bitquery and CryptoRank. What began as a game leak on August 18 has turned into one of the more brazen examples yet of a leaker weaponizing hype for a token launch, and the fallout is now spreading through both gaming and crypto circles.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
Cyberleek’s GTA 6 Leak Turns Out to Be a Crypto Play
Cyberleek first surfaced in mid-August as an anonymous account publishing what it claimed were genuine GTA 6 gameplay clips: basketball outside a house, fragments of the in-game world map, car theft sequences and gunfights. What made the leaks unusual from the start was the branding. Every clip carried a watermark, a QR code and a direct link to a token called $CYBERLEEK, launched on the Solana blockchain, according to reporting compiled by Bitquery’s on-chain investigation.
That detail turned out to matter more than the leaks themselves. Bitquery’s researchers found that the $CYBERLEEK liquidity pool and token minting went live on August 15, 2026, three days before any leaked footage appeared publicly. That sequencing, launching the coin before there was anything to leak, was flagged by researchers as evidence of what Bitquery’s writeup calls “suspicious pre-positioning.” In plain terms: the leak wasn’t the product. The token was.
Rockstar Games and its parent company Take-Two Interactive have not endorsed or been linked to $CYBERLEEK in any way. Coverage of the leaks has repeatedly stressed that the token has no official connection to Rockstar, Take-Two, or GTA 6, and that it functions as an independent, unauthorized crypto asset riding on the attention generated by the leaked clips.
Timeline: From a Solana Wallet to Six Leaked Clips
Piecing together reporting from GameSpot, Bitquery, and gaming-crypto trade outlets, the sequence of events runs as follows. Cyberleek registered its domain on August 14, 2026. The following day, it minted the $CYBERLEEK token and seeded its Solana liquidity pool. The first gameplay clips and world-map fragments went public on August 18, each one branded with the token’s QR code. As the clips spread, so did trading volume: by August 23, the token had crossed a $3 million market cap, which Cyberleek had reportedly promised as the “unlock trigger” for a further clip showing the character Jason at a strip club, a detail reported by crypto-news outlet CoinGabbar.
From there, the scheme escalated. Cyberleek began hosting polls on its own website asking supporters to donate crypto in exchange for a vote on which clip should leak next, a mechanic described by Metro, which reported that at least three additional clips surfaced within a single 24-hour stretch in late August even as Cyberleek publicly insisted the leaks themselves remained “free.” By August 26, GTAForums user Vice Cit, an independent on-chain investigator, had been tracking Cyberleek’s wallet activity for roughly a week. Then, in the early hours of August 27, the pattern investigators had been watching for finally happened: a large, coordinated cash-out.
How the $CYBERLEEK Token Actually Worked
Unlike a typical leak-adjacent NFT drop, $CYBERLEEK wasn’t sold directly by its creator in a single lump sum. Instead, according to the breakdown published by financial-crypto outlet Bleap Finance, the token generated income through transaction fees: every time someone bought or sold $CYBERLEEK on Solana’s decentralized exchanges, a cut of that trade routed automatically back to the token’s creator wallet. That structure let Cyberleek profit continuously from hype-driven trading volume rather than needing to dump a large token allocation all at once, a subtler variant of the classic pump-and-dump.
Bleap Finance’s analysis estimates Cyberleek spent around $29,000 creating and bootstrapping the coin’s initial liquidity. From that starting point, the token’s value exploded. CryptoRank’s coverage put early pumps at more than 5,000% off the launch price, with a later 24-hour gain above 1,400% pushing the market cap to roughly $22 million and trading volume above $112 million on active days. Yahoo Finance’s markets desk separately reported the token surging nearly 80% overnight during one leak cycle, trading around $0.023 with a market cap above $16 million.
Notably, Bitquery’s investigation also flagged that Cyberleek’s token wasn’t alone in the market. At least five other Solana tokens traded under the same “CYBERLEEK” ticker during the same week, several advertising fabricated billion-dollar valuations built on thin or fake liquidity, a pattern common to copycat memecoin launches that try to siphon volume from a trending ticker.
The Rug Pull: Tracing the $270,000 Cash-Out
The event that broke the story wide open happened at roughly 3:27 a.m. EDT on August 27, 2026, when PC Gamer reported that “a series of transactions occurred starting today at roughly 3:27 am EDT, resulting in one $CYBERLEEK trader earning an estimated $270,000, and tanking the token’s value for everyone else.” That estimate came from Vice Cit’s on-chain analysis on GTAForums, which had been documenting Cyberleek’s wallet movements since August 20.
Wolf’s Gaming Blog, which broke additional details on the fund flow, reported that Cyberleek “started moving around $270,000 earned through the cryptocurrency attached to the leaks,” describing the proceeds as coming largely from accumulated trading fees rather than a single token sale. Kotaku’s coverage cited a slightly different figure from the same investigator, close to $250,000, illustrating how fast-moving on-chain estimates can vary slightly between outlets even when describing the same wallet activity. PC Gamer’s headline figure, over $200,000, reflects a more conservative read of the same transactions. All three outlets agree on the core fact: a six-figure sum moved out of wallets tied to Cyberleek within a short window, and the token’s price never recovered.
Kotaku summarized the aftermath bluntly, reporting that “this marks the end for $CYBERLEEK, which at its peak was valued at $0.034, but is now sitting below $0.005, representing a fall of 86 percent.” For a token that had briefly carried a market capitalization north of $20 million, that decline effectively erased most of its paper value within a single trading session.
$CYBERLEEK Price and Market Cap: Rise and Collapse
The table below reconstructs the token’s trajectory using figures reported across CryptoRank, Yahoo Finance, CoinGabbar, Bitquery and Kotaku. Because different outlets pulled data at slightly different timestamps, some figures overlap rather than form a single clean curve, which is typical for fast-moving, thinly-traded memecoin markets.
| Date (2026) | Event | Price / Market Cap | Source |
|---|---|---|---|
| Aug 14 | Cyberleek registers its domain | N/A | GTAIntel |
| Aug 15 | $CYBERLEEK minted, Solana liquidity pool launched | ~$29K creation cost | Bleap Finance |
| Aug 18 | First GTA 6 leak clips and map fragments posted | Early pumps 5,000%+ | GameSpot, CryptoRank |
| Aug 23 | Strip club clip released after market cap trigger | ~$3M market cap | CoinGabbar |
| Aug 23 | Token rally accelerates | ~$25M cap, $36.1M volume | Bleap Finance |
| Aug 24-25 | Overnight surge on new leaks | ~$0.023, $16M+ cap | Yahoo Finance |
| Peak | All-time high price | $0.034 per token | Kotaku |
| Aug 27 | Wallet cash-out, price crash | Below $0.005 (-86%) | Kotaku |
Where the Money Went: Fund Flow Breakdown
Wolf’s Gaming Blog’s account of the August 27 cash-out includes a breakdown of where the roughly $270,000 was routed after being converted from $CYBERLEEK into Solana. Investigators traced the funds through a mix of centralized exchange deposits and no-account swap services, a common laundering pattern for illicit crypto gains because it fragments the trail across multiple custodians.
| Destination | Estimated Amount | Type |
|---|---|---|
| KuCoin | ~$99,000 | Centralized cryptocurrency exchange |
| CCE.Cash | ~$84,000 | No-account crypto swap service |
| Unmoved wallets | ~$91,000 | Held in wallet clusters, not yet transferred at time of reporting |
| Total traced | ~$270,000 | Combined estimate, Vice Cit / GTAForums |
It’s worth noting these figures represent estimates from independent on-chain analysis rather than confirmed disclosures from an identified individual. Wallet clustering and exchange-deposit tracing are standard techniques used by crypto investigators, but they can’t definitively prove that every wallet in a cluster belongs to the same person or group, only that the transaction patterns are consistent with coordinated control.
Rockstar and Take-Two’s Response to the Leaks
Take-Two Interactive has not sat on the sidelines while the leaks circulated. According to IGN’s reporting on the situation, Rockstar’s parent company pursued subpoenas against Microsoft and Discord in an effort to identify the source of the leaks, and Cyberleek continued releasing footage even after those subpoenas became public. IGN’s coverage described the watermarks on the leaked videos as consistently “advertising the ‘CyberLeek’ token at the heart of the cryptocurrency scheme that is believed to be the motivating factor behind all this,” tying the legal pressure directly back to the token angle rather than treating the leaks as a purely reputational problem.
This is a distinct legal track from Take-Two’s earlier, separate subpoena efforts targeting Discord and Microsoft over the initial wave of GTA 6 leak distribution, which tech-insider.org covered in detail in prior reporting. The crypto angle adds a financial-crimes dimension that wasn’t present in the earlier leak cycle, since a token used to defraud buyers can trigger securities and fraud statutes in multiple jurisdictions independent of any copyright or trade-secret claims Take-Two might pursue over the leaked game footage itself.
Why Cyberleek Is Still Anonymous
As of this reporting, Cyberleek’s real-world identity remains unknown. No outlet covering the story, including Kotaku, PC Gamer, IGN or Wolf’s Gaming Blog, has reported an arrest, formal criminal charge, or unmasking tied to the individual or group behind the account. What’s publicly documented is investigative and legal pressure: on-chain tracing by independent researchers like Vice Cit, and platform-level subpoenas from Take-Two aimed at identifying the source through Discord and Microsoft records. Until a platform or law enforcement agency confirms an identity, Cyberleek’s legal status is best described as under investigation rather than charged or convicted of anything.
That ambiguity matters for how the story develops. On-chain forensics can trace where crypto moves, but connecting a wallet cluster to a real name typically requires either a know-your-customer record at an exchange, a legal subpoena that compels disclosure, or an operational security mistake by the person controlling the wallets. KuCoin, one of the exchanges that reportedly received a portion of the cashed-out funds, does enforce identity verification for withdrawals above certain thresholds in most jurisdictions, which could eventually give investigators a lead if Take-Two or law enforcement pursues that avenue.
Historical Context: Leaks, Hype, and Crypto Grifts
Game leaks tied directly to a creator’s own cryptocurrency scheme are still an unusual combination. The 2022 GTA 6 mega-leak, which spread dozens of early development videos, was linked to an individual associated with the Lapsus$ hacking group and had no cryptocurrency component; that leaker’s motivation was reportedly notoriety and access, not a token launch. Cyberleek’s 2026 campaign is a different animal: the leak exists, at least in significant part, to generate attention for a coin that its creator can profit from through ongoing trading fees.
Reporting compiled by GTAIntel and Bitquery does not identify a well-documented prior case of a high-profile game leaker running a dedicated memecoin scheme this explicitly tied to their leaked material. That makes Cyberleek something of a case study for a broader trend that has already played out repeatedly in adjacent internet subcultures: viral moments, celebrity deaths, meme formats and now leaked AAA game footage, being used as instant, disposable marketing hooks for Solana-based tokens that live and die within days. The mechanics are near-identical each time: launch the token first, generate an attention spike, let retail buyers chase the price up through trading fees, then cash out before the audience catches on.
How This Rug Pull Compares to Other Memecoin Scams
Compared with the broader universe of Solana memecoin rug pulls that has emerged since 2024, the Cyberleek case stands out less for its dollar figure and more for the built-in audience it exploited. A $270,000 cash-out is modest by memecoin-fraud standards; some Solana pump-and-dump schemes tied to celebrity endorsements or viral trends have moved seven-figure sums in a single day. What made $CYBERLEEK different is that its “marketing budget” was a leaked build of one of the best-selling video game franchises in history, giving it a captive, highly engaged audience of GTA fans who had no prior exposure to crypto trading and were, in many cases, unfamiliar with how quickly a token’s fee structure can be gamed by its own creator.
The copycat tokens Bitquery identified, at least five separate Solana mints also trading under a CYBERLEEK-style ticker during the same week, are a familiar side effect of any viral token event. Traders chasing the original often buy the wrong contract address entirely, a common vector for additional losses layered on top of the original scheme’s damage.
Market Impact: What the Cash-Out Means for Solana Traders and GTA Fans
For the traders who bought into $CYBERLEEK during its rally, the 86% price collapse Kotaku documented represents a near-total loss on any position opened after the token’s early pump phase. Solana’s decentralized exchange infrastructure means there’s no central authority to appeal to for a refund or reversal, and the fee-based profit mechanism means Cyberleek didn’t even need to sell a large token allocation to profit heavily; ordinary trading activity generated the payout automatically.
For GTA 6 fans, the episode adds a layer of distrust to future leak claims. Because Cyberleek’s leaks were real, verified in part by outlets like GameSpot as depicting actual in-development GTA 6 content, the incident blurs the line between “leak as public interest” and “leak as financial instrument.” Any future leaker with genuine access now has a template for monetizing stolen material directly, rather than relying on ad revenue from reaction videos or reposts, which raises the stakes for how aggressively studios like Rockstar pursue leak sources going forward.
What This Means for GTA 6’s Launch and Rockstar’s Security
Rockstar has not publicly detailed how Cyberleek obtained the footage, and no outlet in this reporting has confirmed a specific breach vector, whether that’s an internal leak, a compromised contractor account, or leaked build files circulating through unofficial channels. What is clear is that the leaks continued across more than a week despite Take-Two’s subpoena efforts against Discord and Microsoft, suggesting the legal process alone wasn’t fast enough to stop distribution in real time.
The financial motive revealed by the crypto angle could actually work in Rockstar’s favor going forward. Copyright and trade-secret law can be slow and jurisdiction-dependent, but a documented, monetized fraud scheme, complete with an on-chain money trail through identifiable exchanges like KuCoin, gives law enforcement a more concrete, prosecutable case than a leak motivated purely by notoriety. If Take-Two pursues that route, the wallet trail Vice Cit and Bitquery have already assembled could become key evidence.
Predictions: What Happens Next
- $CYBERLEEK trading activity fades quickly. With the token down 86% from its peak and its creator having already cashed out the bulk of accumulated fees, expect trading volume to dry up within days as remaining holders exit or abandon their positions.
- More leaks are possible but less profitable. If Cyberleek attempts another clip drop to reignite interest, it will face a market that has already seen the rug pull play out once, making a second pump-and-dump on the same ticker far less likely to succeed.
- Exchange-level identification becomes the key battleground. Because a portion of the funds reportedly moved through KuCoin, a centralized exchange with know-your-customer requirements in most regions, expect any serious investigation to focus on compelling exchange records rather than relying solely on public wallet tracing.
- Expect copycat schemes tied to other leaked media. The core playbook, launch a token before releasing stolen or leaked content, then profit from trading fees, is now a documented, replicable model that other bad actors are likely to try against different games or entertainment properties.
- Take-Two’s legal strategy likely broadens. With a financial fraud angle now attached to the leak, Take-Two has an incentive to pursue this as a fraud or securities matter in addition to its existing copyright-focused subpoenas against Discord and Microsoft.
Frequently Asked Questions
What is $CYBERLEEK?
$CYBERLEEK is a Solana-based memecoin created by the anonymous group behind the August 2026 GTA 6 leaks. It was minted on August 15, 2026, three days before the first leaked clips appeared, and every leaked video was watermarked with a QR code linking back to the token.
How much money did Cyberleek make from the scheme?
Estimates vary by outlet. PC Gamer reported over $200,000, Kotaku’s source cited close to $250,000, and Wolf’s Gaming Blog put the figure at roughly $270,000 in cashed-out trading fees, based on on-chain analysis by GTAForums investigator Vice Cit.
Is Cyberleek connected to Rockstar Games or Take-Two?
No. Multiple outlets have confirmed that $CYBERLEEK and the Cyberleek group have no official affiliation with Rockstar Games, Take-Two Interactive, or the GTA 6 development team. The leaked footage itself is believed to be genuine, but the token attached to it is an independent, unauthorized creation.
Has Cyberleek been arrested or identified?
No. As of this reporting, Cyberleek’s identity remains publicly unknown. Take-Two has pursued subpoenas against Discord and Microsoft to try to trace the source of the leaks, but no outlet has reported an arrest or formal charge tied to the case.
Why did the $CYBERLEEK price crash 86%?
According to Kotaku, the crash followed a large cash-out by a trader linked to Cyberleek in the early hours of August 27, 2026. When a wallet controlling a large share of trading fees or holdings sells or exits at once, it removes buy-side liquidity and confidence, causing the kind of rapid price collapse typical of memecoin rug pulls.
Where did the cashed-out crypto go?
Wolf’s Gaming Blog reported that roughly $99,000 was traced to the centralized exchange KuCoin, about $84,000 moved through the no-account swap service CCE.Cash, and the remaining approximately $91,000 sat in wallet clusters that had not yet moved funds at the time of reporting.
Will more GTA 6 leaks come from Cyberleek?
It’s uncertain. With the token’s value already collapsed and the primary financial incentive largely realized through the cash-out, further leaks would generate less profit than the original campaign, though Cyberleek could still attempt additional drops to rebuild attention or launch a new token.
Is buying leak-branded memecoins like $CYBERLEEK safe?
No security researcher or outlet covering this story has described it as safe. Tokens launched to capitalize on a single news event, especially one minted before the event it claims to be tied to even occurred, carry a high risk of being a pump-and-dump structure, as this case demonstrates.
- GTA 6 Leak: CyberLeek Drops 6 Videos From Playable 2025 Build
- GTA 6 Leak: Cyberleek Drops 4:38 Lucia Prologue Clip [2026]
- GTA VI Leak: Take-Two Subpoenas Discord, MS by Sept 4
- GTA VI Leak: Rockstar Speaks Out, TTWO Drops 3.6% [2026]
- Twitch Outage Hits 17,000 Reports as GTA 6 Trailer Drops [2026]
Related Coverage
- GTA 6 Leak: Cyberleek Drops 4:38 Lucia Prologue Clip [2026]
- GTA 6 Leak: CyberLeek Drops 6 Videos From Playable 2025 Build
- GTA VI Leak: Take-Two Subpoenas Discord, MS by Sept 4
- GTA VI Leak: Rockstar Speaks Out, TTWO Drops 3.6% [2026]
- Twitch Outage Hits 17,000 Reports as GTA 6 Trailer Drops [2026]
