The most quietly damning finding in the whole GTA 6 leak story is not about Rockstar, and it is not about the footage. It is about who got paid.
Blockchain analytics firm Bitquery ranked every trader of the Cyberleek token by realised profit over the five days ending August 21. The five biggest winners took roughly $158,000 out between them. All five made their first purchase inside a six minute window, between 17:48 and 17:54 UTC on August 18, minutes after the first clips appeared. And none of them trace back to the token's creator.
They were, by Bitquery's behavioural read, automated traders and one fast whale. Machines that buy whatever moves.
What Happened in Those Six Minutes
The token had been tradable for sixty eight hours and going nowhere. Then the footage landed at around 17:00 UTC and the hourly candle ran 13x on $1.47 million of volume.
Everyone who made real money was already in before the second, much larger candle formed. The wallet profiles Bitquery published tell the story without needing any crypto literacy:
- One wallet put in about $2,771 and took out $37,428, finishing inside seven hours across 112 trades.
- Another put in $4,688 across nine trades and was completely out sixty five minutes later with $25,072.
- The largest winner made 713 trades in the token and realised $48,706, still distributing three days later.
Those are the returns you get from being first, and only from being first.
The Part That Should Bother Fans
Bitquery traced the funding behind each of those wallets and found no link to the operation. One cluster was a self-rotating bot that spreads money across sub-wallets on a schedule and pulls it back to concentrate on a position, with a profile showing thousands of distinct counterparties. Two more routed through a popular trading terminal all day, adding this token to a list of dozens. One was an exchange-funded whale that had withdrawn a round 1,000 SOL two weeks earlier, on August 4, before the token or the leaker's public name existed.
Even three wallets that looked like they had been handed free supply, showing $62,000 sold and nothing bought, turned out on inspection to be arbitrage bots working a second pool that someone opened six minutes into the run.
So who funded the $158,000? Bitquery's answer is direct: everyone who bought after 18:00 UTC. The main pool turned over $22.7 million across 163,014 trades and 16,182 distinct wallets in seven days. By August 21 the price was down roughly 60% from the August 18 high, with around 8,600 wallets still holding.
Those are, overwhelmingly, GTA fans who saw a leak, saw a QR code, and thought they were early to something.
Four Copycats Made It Worse
Bitquery also identified four separate copycat mints using the same ticker, which between them did roughly $713,000, $422,000, $297,000 and $200,000 in volume. Every dollar of that went to whoever launched those, not to the leaker and certainly not to the buyers.
This is the standard shape of an event-driven token. A narrative decides which name moves. Bots decide who gets filled. Retail arrives third and pays for both. The name recognition that made "Cyberleek" valuable also made it trivially cloneable.
The Practical Takeaway
There is a version of this story where the leaker is a principled actor funding a campaign. The on-chain record does not support it very well, and the operation's own behaviour, selling sponsorship slots and running paid polls on which clip to release next, undercuts it further. But even setting motive aside entirely, the arithmetic is unforgiving.
If you bought this token, you were very unlikely to be the beneficiary of the pump. You were far more likely to be the liquidity for it.
Never buy the token. Never scan the QR codes burned into leaked footage. Never pay for promised clips, builds or early access. This is reporting on public blockchain records, not financial advice. Broader safety guidance is in the leak scam guide, and the staging timeline is in the token launch analysis.
Frequently Asked Questions
Did the leaker make money at all?
Reported estimates put operator trading fees somewhere between $40,000 and $60,000, with separate community analysis estimating around $50,000 received and a large quantity of unsold tokens. None of it is audited, and the biggest single extractions on the trading book went to unrelated wallets.
How can anyone see this data?
Solana is a public blockchain. Every transaction, wallet balance and transfer is permanently visible. Bitquery ranked traders using public records with on-chain figures verified as of August 21, 2026.
Are the wallet identifications certain?
No, and Bitquery says so. Grouping wallets into clusters is an inference from transfer timing and amounts, not confirmed ownership. Blockchain addresses are pseudonymous.
Does any of this change what the leaked footage shows?
No. The footage is treated as genuine material from an internal build. The financial layer is a separate story that sits on top of it.
The Bottom Line
A group spent four days building a narrative engineered to move a token, and within six minutes the profits were being harvested by trading bots that had never heard of GTA 6 and did not need to. Whatever you think of the manifesto, the money went to machines, and it came from fans. That is the clearest argument yet for watching the clips, ignoring the watermark, and keeping your wallet shut.
Sources: Bitquery on-chain investigation