The CyberLeek group, behind a series of high-profile GTA 6 gameplay leaks, pulled off one of the most cynical schemes in this cycle. Instead of simply leaking insider content, the hackers turned the leaks into a full-fledged financial pyramid, then crashed their own asset. Based on my calculations from on-chain data analysis, the attackers' total revenue from the dump and fees amounted to approximately $286,000.
Mechanics of the manipulation
The critical drop in the CYBERLEEK exchange rate occurred on August 27 — just a few hours before the official gameplay premiere on Netflix. This is not a coincidence but precise timing: the hackers waited for the peak of hype, when community attention was at its maximum, and then liquidated their positions.
Since mid-August, CyberLeek published gameplay videos, embedding links to donation wallets and the token contract address launched via PumpFun. Thanks to the buzz around the game and skillful social engineering, the coin's market capitalization reached peak values of around $25 million.
A key element of the scheme was the burning of a reserve of 270 million CYBERLEEK (approximately $1.79 million at that time). This step created an illusion of scarcity and strengthened retail investors' trust. However, as the analysis showed, this was a classic "trust-building" move before the knockout.
Anatomy of the dump
On-chain tracing revealed that a wallet linked to the group accumulated $154,683 in wSOL and 15.4 million CYBERLEEK as royalty fees. Shortly before the Netflix premiere, these tokens were converted into approximately $125,000, triggering a 40% price collapse within minutes.
Even before the active dumping phase, the coin showed weakness, but after the creators' actions, it completely collapsed. Over several days, the CYBERLEEK rate fell from $0.03 to $0.003 — a loss of 90% of its value. Meanwhile, part of the funds was withdrawn to centralized exchanges KuCoin and CCE.Cash, while another part settled on private addresses, indicating an attempt to obscure the trail.
Likely, the hackers expected a longer "milking" of the project, but the price drop and declining public interest forced them to accelerate their exit. This is a classic behavior pattern for rug pull organizers: when metrics start to deteriorate, they prefer to lock in profits rather than take risks.
My conclusion: this story is yet another reminder that meme tokens tied to loud news events are an extremely risky instrument. Even the appearance of legitimacy (burning reserves, public wallets) does not guarantee protection from insider manipulation. Always check liquidity and token distribution before entering such positions.