The US Marshall reportedly arrested the third Wiz (Veer Chetal) of hacker trio Glevis (Malone IAM) and Box (Jeandiel Serrano).
Using a spoofed phone number and fake support calls, the trio impersonated Google and Gemini representatives, manipulated victims and transferred funds, and reset two-factor authentication.
The biggest transaction occurred at UTC at 4:05am when 4064 BTC was valued at $238 million in one transaction. The moment that happened was captured by Zack on screenshare, including his revelation.

A mug shot of Veer Chetal (Wiz) after allegedly arrested. Source: Zachxbt
Veer Chetal played a major role in the robbery
According to Zach, Wiz (Veer) received a big cut from the booty, but made the mistake of leaking his full name during the theft, which was filmed on screenshare.
He was also featured under his Veer name in multiple recordings by his accomplices. Zach shared his mug shot in X as a thread update, waiting for an official update from the appropriate authorities.
Veer, 19, faces years of jail time if arrested by a former US American s and found guilty in court.
Update: Wiz (Veer Chetal) has been arrested by a US Marshall, and here is his mug shot. pic.twitter.com/o25uu25vhr
– Zachxbt (@zachxbt) March 25, 2025
His arrest comes months after Gleeve and Box were arrested
According to the unsealed indictment, Grievis’ true identity is Malone Lamb, a Singaporean citizen living in Miami and Los Angeles, and Box was identified as Giandiel Serrano of Los Angeles.
The charges revealed that both were arrested in September 2024 and accused of conspiring to steal and wash cryptocurrency. According to the Department of Justice, he was scheduled to appear in separate federal courts in California and Florida on Thursday, September 19, 2024.
Zach’s investigation suggests that the stolen funding cluster was used to purchase luxury items such as cars, watches, jewelry and designer clothing. Unlike the other two, Malone had not revealed his identity during the robbery, but his flashy lifestyle left him apart.
In his loot, Ram is said to have purchased a series of luxury cars, including $3.8 million worth of Pagani Juaira, $1 million worth of Lamborghini Levuel, and Custom Porsche and Ferrari.
Authorities have reported that 22 luxury cars belonging to the Ram, including the white Lamborghini with his name, are still missing.
Apart from luxury cars, Malone rented several mansions to acquire luxury watches, and bought one of the watches for around $1.8 million.
Within a short time he got his booty, Malone quickly built a reputation for himself, due to how he used it in the Los Angeles nightlife scene. He handed out handbags to strangers, including influencers, many of whom share their experiences with Instagram videos.
Malone was linked to the booty after accidentally sharing the address used to buy gorgeous clothes.
Glevis was the first person to be arrested. He was located via OSINT in LA/Miami as his friends continued to post his location on social media every night.
He also had an Instagram account in 2024 where he shared his photos using his name. Glevis’ partner attempts to warn Malone that he went down his path after the arrest of her boyfriend.
Box and Wiz converted most of their funds to XMR, but they accidentally slipped down by linking their laundry funds with dirty funds in multiple instances.
11/Most funds were converted to XMR, but both boxes and withs mistakenly linked funds that were laundered in multiple instances with dirty funds.
a) Wiz, who is screensharing, showed the address where he sent the funds to the cluster for millions of exposed designer clothes…pic.twitter.com/l0e2zzguyg
– Zachxbt (@zachxbt) September 19, 2024
Cfinvestigators, Zeroshadow, Zachxbt, and Binance Security were able to use this information to freeze over $9 million, with $500,000 being returned to the victims.
Lamb is currently facing two charges in the District of Columbia for financial fraud and conspiracy. Each claim he is charged carries a maximum period of 20 years.
He is currently in custody in Virginia, and attorney Scott Armstrong points out that his trial will occur in October 2025. The lawyer said Lamb wanted to file other legal attacks.
The Crypto scammer, considered a flight risk, reportedly seeks a search warrant affidavit and reports relating to the search made in his case.
Prosecutors say Lam may have seen it in prison for 168-210 months due to the gravity of the crime, and stolen bitcoin is still being done.
Cryptopolitan Academy: Want to grow your money in 2025? Learn how to do that with Defi in future WebClass. Save your spot
Discover more from Earlybirds Invest
Subscribe to get the latest posts sent to your email.