The CyberLeek group, behind the scandalous GTA 6 gameplay leaks, pulled off a bold financial operation by crashing its own token. My calculations, based on on-chain data analysis, show that the hackers extracted about $286,000 through a dump and fee collection — a classic example of how hype around a popular game turns into a tool for profit extraction.
The dump mechanics: from $25 million to zero
The critical drop in CYBERLEEK occurred on August 27, just hours before the official gameplay showcase on Netflix. This was no accident: the hackers acted with clockwork precision, using the frenzy to maximize gains.
Since mid-August, CyberLeek had been publishing gameplay videos, embedding links to donation wallets and the token contract address launched via PumpFun. Thanks to viral interest in the game, the coin's market cap peaked at around $25 million. However, behind this facade lay a well-thought-out manipulation.
My investigation, based on data from open sources, shows that the group burned a reserve of 270 million CYBERLEEK (about $1.79 million at the time) to create an illusion of trust. This was a classic tactic to "pump" the price before the collapse. A user under the pseudonym Vice Cit conducted a detailed analysis, uncovering an unconventional scheme: the hackers directed traffic to a website where token holders voted on new leaks, stimulating demand.
On-chain traces and panic exit
According to blockchain transactions, a wallet linked to CyberLeek received $154,683 in wSOL and 15.4 million CYBERLEEK in royalty fees. Shortly before the Netflix premiere, these tokens were sold for approximately $125,000, triggering a 40% price crash within minutes. Over several days, the asset lost 90% of its value, falling from $0.03 to $0.003.
Interestingly, even after that, some of the funds were transferred to the KuCoin and CCE.Cash exchanges, while the rest went to private wallets, indicating an attempt to cover tracks. Vice Cit suggests that not all addresses have been revealed, and the hackers may have been dumping small amounts from unknown wallets.
My expert assessment: CyberLeek clearly expected a longer game, but the price drop and declining public interest forced them to act in panic. This is a typical pattern for a rug pull, where token creators use hype for quick enrichment, leaving investors with devalued assets. The incident also echoes the May hack of Keith Gill's account to dump RKC, highlighting the growing trend of using social media for manipulation in the meme-coin market.