KuCoin's Legal Threat Against a Stolen-Funds Whistleblower Just Backfired

KuCoin is under fresh scrutiny after on-chain sleuth ZachXBT alleged the exchange fired off legal warning letters to someone who’d flagged that stolen crypto had passed through KuCoin-linked accounts — a move that’s now drawing more attention to the case rather than less.

At the center of it is a reported $250,000 theft from August 2025, tied to Atomic stealer malware. ZachXBT’s Telegram post named the original theft address alongside five deposit addresses he says belong to KuCoin, claiming the accounts were opened using what he called “purchased mule KYC” — verification documents belonging to someone other than the actual account holder. None of this has been verified through court filings or confirmed publicly by KuCoin.
A screenshot circulating alongside the post shows a message attributed to KuCoin’s Customer Care and Support Team, acknowledging the right to raise concerns through proper legal channels but cautioning that false or unlawful statements could expose the sender to legal claims, with a line reserving “all rights.” The exchange’s message resurfaced more widely after X user DNBWIZARD posted screenshots of it, mocking the idea of being threatened with a lawsuit and questioning the jurisdictional basis for it.

Hilarious @kucoincom threatening to sue me

Which justification?

Turks & Cais ? pic.twitter.com/ucfqCmFkHT

— DNBWIZARD - HCC (@dnbwizard) June 30, 2026

Echoes of Past Compliance Trouble

This isn’t happening in a vacuum. KuCoin pleaded guilty to operating as an unlicensed money transmitter back in January 2025, agreeing to pay roughly $297 million in penalties after the Justice Department found its anti-money-laundering and KYC controls weren’t doing their job. That followed a 2024 indictment alleging the exchange had moved more than $5 billion in and over $4 billion out in suspicious or criminal funds across a seven-year span.

A Recurring Pattern

The pattern has repeated since: a fake Ledger Live app scam earlier this year drained over $9.5 million from more than 50 victims, with the stolen funds reportedly routed through over 150 KuCoin deposit addresses before hitting a mixing service — another trail ZachXBT says he traced. Separately, KuCoin had picked up a MiCA license in Austria in late 2025 to operate across the EU, only for Austrian regulators to later block its European arm from onboarding new customers, citing inadequate compliance staffing.

You might also like: Crypto Trader John Walsh Bets July Will Be a Turning Point for SOL and Solana Meme Coins