As the cryptocurrency market continues to grapple with the challenges of security and regulation, a recent investigation has shed light on the alleged involvement of a US-based teenager in a series of high-profile crypto thefts. According to blockchain investigator ZachXBT, the individual in question, Dritan Kapllani Jr., has been linked to over $19 million in crypto thefts carried out through sophisticated social engineering attacks targeting cryptocurrency holders.
The investigation, which was made public after US authorities unsealed a criminal complaint against another individual allegedly involved in the thefts, reveals a complex web of online interactions and financial transactions. ZachXBT's findings suggest that Dritan frequently flaunted his luxury lifestyle on social media, showcasing high-end cars, designer watches, and private jets, while also engaging with other threat actors online. A crucial piece of evidence emerged during a Discord call on April 23, 2026, where Dritan allegedly displayed an Exodus wallet containing $3.68 million in cryptocurrency.
Unraveling the Trail of Crypto Thefts
ZachXBT's meticulous analysis of the Ethereum wallet address shown during the Discord call led to a major breakthrough in the investigation. The address was found to be connected to the theft of 185 BTC, worth around $13 million at the time, from a victim targeted through social engineering tactics. Further investigation revealed that Dritan's wallet had received approximately $5.3 million from the theft, with nearly $1.6 million being spent or laundered by the time the Discord call took place.
The allegations against Dritan are particularly striking, given his relatively young age and the fact that he had avoided prosecution until recently turning 18. The investigation has also raised questions about the role of social media and online platforms in facilitating crypto thefts and the laundering of stolen funds. As the cryptocurrency market continues to evolve, it is clear that law enforcement and regulatory agencies must remain vigilant in their efforts to combat cybercrime and protect investors.
