Blockchain sleuth ZachXBT has identified the Hyperliquid whale who made $20 million trading with extreme leverage has been identified today by ZachXBT. In his post on X, he exposed the trader as William Parker, a British man with a criminal history tied to fraud, hacking, and casino theft.
According to reports, an anonymous trader, between January and March 2025, placed a series of highly leveraged bets on Hyperliquid and GMX, turning six-figure positions into $20 million. The first trade was carried out by 0xe4d3, which longed ETH and BTC with 50x leverage just before President Donald Trump announced the crypto reserve. The wallet made $10 million from the move, and shortly 0xf3f4 made a 40x leveraged BTC short, gaining another $9 million.
During his analysis, ZachXBT traced 0xf3f4’s transactions and discovered several wallets linked to crypto casinos and exchanges, including Roobet, Binance, ChangeNOW, Shuffle, BC Game, Metawin, and some others. The trader had also signed a message on X, mentioning his profits, but when ZachXBT called him out, he deleted the posts.
“An analysis for the X account used by 0xf3f indicates it was likely purchased at a point in time (recent name change, years of inactivity, aged account). I saw they follow @CryptxxCatalyst who posted links to multiple phishing sites + replied to people trying to trick them,” ZachXBT said.
He also talked about the move, saying, “I reach reached out to @realScamSniffer about the phishing sites who regularly track them. A public address for the HL whale was set as the drainer fee receiver on the projection[.]fi phishing site in Jan 2025. 0x7ab8c59db7b959bb8c3481d5b9836dfbc939af21. 0x7ab also directly received $17.1K in Jan 2025 from another phishing draining customer prior to where his wallets became tracked this month.”
ZachXBT uncovers leaks amid identity exposure
According to ZachXBT, one of the first EVM addresses used by 0xf3f4 led back to casino withdrawals on Solana spread across four crypto-gambling platforms. One casino confirmed that the funds came from an input validation exploit, where the trader manipulated a game’s system to withdraw more than he deposited, and said that they had negotiated with the exploiter through a now-deleted Telegram account (7713976571), according to ZachXBT.
ZachXBT also mentioned that he tracked the Telegram posts on the GMX group, noting that the user had asked for help at the same time 0xe4d3 was carrying out trades. A payment from the wallet was tracked to an unnamed person who confirmed that they had received funds from the Hyperliquid trader, providing a UK phone number.
The number was linked directly to William Parker, who had been linked to a $1 million theft from two casinos in Finland. Before that, he was known as Alistair Packover who has been popular in the UK for fraud and hacking-related charges. According to ZachXBT, the funds are still untouched and sitting in 0x51d99A4022a55CAd07a3c958F0600d8bb0B39921.
After flipping BTC and ETH for millions, Parker turned to MELANIA, the meme coin allegedly launched by First Lady Melania Trump, and opened a long position for the second time. As of March 19, Parker’s only active position was the MELANIA long. The position was down $50,000 initially, but after the identity leak and speculation on social media, the token rallied 10% in one day. MELANIA hit a one-week high of $0.77, flipping his unrealized losses into a $212,000 profit, said ZachXBT.