The money trail behind the leak campaign is starting to come into focus.
Cyberleek appears to be cashing out after its recent run of GTA VI leaks, with hundreds of thousands of dollars generated through the $CYBERLEEK cryptocurrency reportedly withdrawn just before Rockstar’s upcoming Extended Look at the game.
GTA Forums member ViceCit, who has been tracking Cyberleek’s cryptocurrency activity, said they traced roughly US$268,000 withdrawn from transaction fees. The apparent cash-out comes after Cyberleek repeatedly tied the token to its GTA VI leak campaign.
Grand Theft Auto VI
Release Date: 19 November, 2026
Platforms: PlayStation 5, Xbox X|S Series
Developer: Rockstar Games
Price: US$80 for Standard Edition, US$100 for Ultimate Edition
Did Cyberleek cash out $CYBERLEEK before the GTA VI Extended Look?
Cyberleek has used its leaked GTA VI footage to promote $CYBERLEEK, a token minted on the Solana blockchain. The group eventually allowed people holding the cryptocurrency to vote on the subject of its next leak, according to PC Gamer.
Cyberleek also claimed that support for the token would fund a "secret project", with the money going towards infrastructure, security, and protection needed to continue its campaign against Rockstar and Take-Two.
The withdrawals come just before Rockstar is due to show its official Extended Look at GTA VI. There is no confirmation that the timing means Cyberleek is finished leaking material or attempting to disappear, but the movement of the funds has provided a clearer look at the money behind the campaign.
How much money did Cyberleek withdraw after the GTA VI leaks?
ViceCit said they traced roughly US$268,000 that had been withdrawn from $CYBERLEEK transaction fees. According to their findings, the money was divided across four transactions and sent through several wallets, ultimately ending up in three places: cryptocurrency exchange KuCoin, swap service CCE.Cash, and several other wallets where some of the money had yet to move.
The way those funds were moved may also provide a clue about who is behind Cyberleek. "The KuCoin and CCE.Cash transactions seem to suggest at least two people are involved in this and they're using different methods to withdraw their crypto," ViceCit said.
CCE.Cash does not require registration, but ViceCit noted that the swap service could still hold information that law enforcement may be able to use in an investigation. A more detailed breakdown of the transactions is expected to follow.
How Cyberleek made money from the $CYBERLEEK crypto token
PC Gamer provided more context on how Cyberleek was able to generate money through $CYBERLEEK. The wallet that originally minted the token reportedly placed the initial supply alongside another cryptocurrency into a liquidity pool on Raydium, making the wallet holder a liquidity provider.
"When currencies are traded through a Raydium liquidity pool, transaction fees are charged which are then split between its LPs," PC Gamer explained. In other words, as people bought and traded $CYBERLEEK through that liquidity pool, transaction fees were being generated for its liquidity providers.
The same wallet that originally minted $CYBERLEEK later collected more than US$200,000 worth of the token in accumulated transaction fees. Those tokens were then converted into other cryptocurrencies and moved across several different wallets. Following the transactions, the value of $CYBERLEEK reportedly fell by roughly 40%.
Take-Two, meanwhile, has already intensified its efforts to identify whoever is behind Cyberleek, seeking records from Microsoft and Discord as part of its investigation. With ViceCit now pointing to another service that could potentially hold information useful to law enforcement, the crypto cash-out may have created another trail to follow.
