High-Leverage Windfall: Precise Bitcoin and Ethereum Trades
Recently, well-known on-chain investigator ZachXBT released an investigation into a mysterious trader who made over $20 million in a short time on Hyperliquid and GMX. The trader’s true identity may be linked to several fraud and hacking cases. This individual not only allegedly leveraged high-risk trades to accurately time geopolitical events but is also connected to multiple gambling platforms, phishing sites, and money-laundering addresses. The real identity behind the trades turned out to be William Parker, who was convicted of fraud and casino theft in the UK and Finland, and is also known as Alistair Peckover.
High-Leverage Profits: Precise Bitcoin and Ethereum Trades
According to ZachXBT’s on-chain tracking, from January to March 2025, a trader (0xe4d3) used positions with up to 50x leverage. The trader first went long on BTC and ETH just before Trump announced his “Crypto Reserve” plan, earning approximately $10 million on one trade. Later, they opened a short position on BTC with another address (0xf3F4), profiting $9 million. These well-timed moves quickly caught the attention of the crypto community, sparking curiosity about the identity of this high-stakes trader.
Before Trump announced the Crypto Reserve, 0xe4d3 held large long positions in ETH and BTC with 50x leverage, making $10 million in profits.
0xf3F4 used a large BTC short position with 40x leverage, making $9 million in profit.
Linked Addresses: Tied to Gambling Platforms and Phishing Scams
ZachXBT conducted an in-depth analysis of the interactions and transaction records between the trader’s addresses (such as 0xf3F4, 0xe4d3) and discovered extensive dealings with gambling or high-risk platforms, including Roobet, Binance, Gamdom, Shuffle, Alphapo, and BC Game. Additionally, the trader had interacted with well-known phishing exchange platforms ChangeNOW and Metawin.
One key address, 0x7ab8…, was traced to receiving a “drainer fee” from a phishing website, projection[.]fi, in January 2025, and it had even received transfers from other scam victims. These signs suggest that the trader was not just engaging in “smart trading” but could be involved in illegal profits.
Further evidence of 0xf3F’s identity.
0xf3F signed a statement used on the X account @qwatio, stating they made $20 million on GMX and Hyperliquid. This means they must have controlled the relevant wallets in the cluster to match this $20 million figure. After ZachXBT commented on their X post, the post was deleted.
ZachXBT believes the analysis of the X account used by 0xf3F suggests it was likely purchased at some point, based on recent name changes, years of inactivity, and the account’s age. He also found that this account followed @CryptxxCatalyst, which frequently posts links to multiple phishing websites, attempting to deceive those who respond.
From Solana to Ethereum: Funding Exposes Weaknesses
Further analysis by ZachXBT revealed that the earliest funds linked to these addresses came from an exploit of a gaming chain vulnerability on Solana. After contacting one of the casinos, ZachXBT confirmed that the funds came from an “input validation exploit” and revealed that the trader had communicated with the casino through a now-deleted Telegram account.
Through open-source intelligence (OSINT), he found that this Telegram user had posted for help in the GMX group, and the timing aligned with the trading activities, further corroborating the identity.
Payment Record Exposes True Identity: William Parker
Ultimately, ZachXBT discovered that address 0xe4d3 made a payment to an individual and, using a UK phone number provided by the recipient, linked it to a man named William Parker. Parker had been arrested and convicted in Finland in 2023 for stealing approximately $1 million from two casinos.
The investigation also revealed that William Parker had used the alias Alistair Peckover (also known as William Peckover) in the early 2010s, making headlines in the UK for internet fraud and gambling-related crimes. These past behaviors align closely with his current actions, making it hard to believe he has changed.
Funds Location and Current Situation
Currently, most of the funds are still concentrated in the address: 0x51d99A4022a55CAd07a3c958F0600d8bb0B39921, and have not been fully moved or laundered. ZachXBT emphasizes that William Parker/Alistair Peckover clearly has not learned from his past mistakes, as he continues his old ways after serving time. This case serves as a warning about the risk management of decentralized financial platforms and exposes how the combination of anonymity and high leverage allows seasoned fraudsters to return to the “stage.”
Risk Warning
Cryptocurrency investment carries a high level of risk, with prices potentially fluctuating wildly, and you may lose all your capital. Please assess the risks carefully.