I went to see the site of Cyberleek, the hacker of
GTA 6, and he is clearly not an amateur.
I am convinced that it is not a single person, but a group of hackers.
Its contact system works in two stages :
- It first generates a Session account (secure, anonymous and decentralized messaging) with a unique recovery phrase. This allows the person who wants to contact him to have a disposable and end-to-end encrypted communication channel.
- Then, it generates a donation amount in Monero (XMR), an anonymous cryptocurrency. Unlike Bitcoin, Ethereum or Solana, its blockchain is private and the transaction amounts are completely obfuscated. So no one can see how much you have sent, except the one who has the private key (Cyberleek).
He asks for 400 XMR ($165K), but what is really interesting are the numbers AFTER the decimal point.
There are 12 decimal places that are generated at the same time as the Session account and serve as a unique identifier. When you send exactly this amount, Cyberleek detects the transaction on the blockchain, extracts the decimals, recalculates the corresponding Session ID and contacts you.
According to the site, it is purely mathematical/cryptographic on the client side. The page generates a 12-digit ID mathematically linked to the Session account. As Monero hides the amounts, only Cyberleek can decrypt the amount received and find your Session ID. No server storage of the ID is necessary before payment.
He also specifies that it is absolutely necessary to send the funds from a personal wallet (Cake Wallet, Feather...) and not for a while, otherwise the decimals may be rounded and he will never be able to find you.
I think it's a rather elegant system, and we also find the same level of sophistication at the infrastructure level.
Their site can hardly be offline permanently, because it is hosted decentrally on Arweave (permanent and immutable storage on blockchain) and its content is accessible via many gateways of the ar(
dot)io network.
These gateways are access doors that serve the same HTML file stored on Arweave. Dropping one gateway (or even several) changes almost nothing since the site will remain accessible on all the others, and new mirrors may appear in a few minutes.
All these elements make me convinced that Cyberleek is a group and not a single person, and given the modus operandi, that they are pros. Their knowledge of cryptography and the use of decentralized technologies suggests that we are far from simple script kiddies or hackers who hack only via social engineering. There is a real technical mastery there.
The slightly childish / trolling side suggests the opposite, but the technical side is beyond doubt.
The same thing in the way they manage their communication: everything goes through their website. They voluntarily avoid any social network that could leave logs and compromise their identity.
