The GTA 6 leaker's crypto coin existed before the leak did. That is not a theory. It is a timeline.
Is the CYBERLEEK token connected to the GTA 6 leak?
Yes, and the order of events is the whole story. The group's domain went up on 14 August. The CYBERLEEK token made its first on-chain trade on a Solana liquidity pool on 15 August, at a fully diluted valuation near $55,000. The GTA 6 gameplay footage and map did not surface until around 17:00 UTC on 18 August, and when they did, they carried QR codes pointing at both the site and the token. So the financial instrument was built, funded and trading three days before there was anything to leak. That sequence is verifiable on-chain by anyone who wants to check it, which puts it in a different category from the usual leak speculation. What it establishes is that this was structured as a token launch with a leak attached, rather than a leak that someone later tried to monetise.
What the on-chain data shows
The numbers come from an investigation Bitquery published on 21 August. In the hour after the footage spread, the token moved 13x on $1.47 million of volume. Across the following seven days the main pool turned over $22.7 million in 163,014 trades between 16,182 distinct wallets.
That is a large amount of activity for a coin that had existed for three days and whose only marketing was a QR code stamped on stolen footage.
Who actually made the money?
Not the people you would expect. The five wallets that took the most out of the pump realised roughly $158,000 between them, and every one of them bought inside a window that opened at 17:48:26 and closed at 17:54:02. Six minutes.
None of those five trace back to the token's deployer. They were automated traders, bots that buy whatever is moving and sell into the spike. Even the wallets that initially looked like they had been handed free supply turned out on inspection to be arbitrage bots. The group built the launchpad; the machines took the payout.
What this does not prove
It does not prove who the leakers are. It does not prove the deployer profited, because the deployer's money trail goes dark at the point where funds leave the pool. It does not prove that any named individual is connected to any named wallet. On-chain data shows what moved and when, not who was holding the keys.
It is also worth noting that Stop Killing Games, whose name circulated alongside the leak, publicly disowned the group. No leaked footage is shown in the video or on this page.
What the video covers
- The timeline in order: the domain, then the token launch, then the leak
- Bitquery's on-chain data and what the 13x candle actually shows
- The five wallets, the six-minute window, and the $158,000 exit
- What the evidence does not prove, stated plainly
- Why Stop Killing Games publicly disowned the group
What we do not know yet
- Who is behind the wallets, because on-chain data does not name people
- Whether the deployer profited at all, since the trail goes dark
- Any connection between this group and the 2022 leak
Sources
Evidence tier for every figure above: observed, on-chain and independently checkable. Evidence tier for who is behind the wallets: unverified, and treated as such. See how this site grades evidence.
- Bitquery, 21 August 2026: the full on-chain investigation, including the pool, the candle, the volume figures and the five wallets
Both GTA 6 leaks side by side, and how to tell a real one from a fake: GTA 6 leaks, explained.
GTA 6 
