Did CyberLeek Really Make $25M From GTA 6 Leaks? The Money Trail Explained

How Much Money Has CyberLeek Already Made with GTA 6 Leaks?

CyberLeek's most traceable income comes from a Solana meme coin: CYBERLEEK surged more than 14-fold in 24 hours, reaching a $25 million market cap on August 23, with trading volume hitting $36.1 million. According to a GTAForums investigator, Cyberleek invested about $29,000 into creating the coin, and though they do not make money directly from its sale, every time someone buys $CYBERLEEK an additional transaction fee goes directly to the creator. That said, no verified total exists, and much of the "value" sits in a volatile token that could collapse before it is cashed out.

Buying GTA 6 on November 19? Make your money go further. Bleap gives you up to 20% cashback on gaming platforms like Steam, PlayStation, and Xbox, with 0% FX fees and no monthly subscription. It is a debit card you can use anywhere Mastercard is accepted. Get the Bleap card →

1. CyberLeek's Estimated Earnings: What We Know So Far

Putting a Number on It

Pinning an exact figure on CyberLeek's earnings is genuinely hard. The actors are anonymous, the money moves through crypto, and many claims come from the leaker's own promotional posts rather than independent verification.

What we can trace points to a coordinated crypto play. The token launched on August 15, 2026, three days before any footage was even leaked online. Once the footage started, the numbers moved fast. Around $11.8 million worth of the token was traded on August 18 alone, suggesting the coin and leak campaign may have been planned as part of the same rollout. By the end of the week, CYBERLEEK reached a $25 million market cap on August 23, with trading volume hitting $36.1 million.

The realistic take on actual creator income is more modest than the market cap suggests. The leaker does not appear to make money directly from the coin's sale, but every time someone buys $CYBERLEEK, an additional transaction fee goes directly to the creator. With a roughly $29,000 setup cost and tens of millions in trading volume flowing through fee-bearing transactions, the take from fees alone likely runs into six figures. Any further upside depends on the creator's own token holdings, which they cannot dump all at once without crashing the price.

Why "Earnings" Is Complicated for Hackers

There is a big gap between a token's paper value and cash in a bank account. Cyberleek cannot just sell all the coins at once and bolt with a million dollars, because the coin's value still relies on people trading it around, which has a time limit with the GTA 6 leaks not being a forever thing.

Traceability is the other problem. A GTAForums investigator claims they traced the wallet that created the coin back to a KuCoin wallet, and KuCoin's policy allows law enforcement with a subpoena to receive identity information about account holders. In other words, the same on-chain visibility that let outsiders watch the money flow in could later help authorities follow it out. Demanded amounts, promoted milestones, and confirmed personal profit are three very different things, and only the last one really counts.

2. Who or What Is CyberLeek?

Origin and Identity

CyberLeek is a persona, not a confirmed person. The short version is that no one knows for certain who CyberLeek is: it is the name attached to an anonymous individual or group that spent a week posting alleged Grand Theft Auto VI development footage, and nobody has confirmed their identity, location, or headcount.

It is worth being precise here, because two separate events often get blurred together. CyberLeek is the pseudonym of the person or group believed to be responsible for leaking a second wave of alleged GTA VI leaks on August 18, 2026, and while gaming communities and journalism attributed the leaks to CyberLeek, the episode is unrelated to the Rockstar leak in September 2022. That earlier 2022 breach was the work of the Lapsus$ group, which we cover below because it set the template for everything CyberLeek later did.

Motivations Behind the Rockstar Targeting

CyberLeek wrapped the operation in a cause. The token's main official utility has been as a crowdfunding tool for the alleged leakers, who claimed funding would strengthen a fight for gamers' digital rights, though no detailed public roadmap has emerged. The financial reality undercut the messaging. One promise used to pump the coin, a claim they would release a PC download client letting everyone play the $2 billion blockbuster for free, has since been proven false, and there is an irony in holding forth on consumer rights while pumping crypto.

Rockstar was the ideal target for one simple reason: attention. GTA 6 is arguably the most anticipated entertainment release of the decade, which guarantees that any leak generates enormous, free media amplification. For a campaign designed to drive token demand, that built-in audience is the whole point.

Connection to Previous High-Profile Breaches

The 2022 precedent matters. The Lapsus$ group inflicted nearly $10 million in damages to several high-profile tech companies, including Uber, Nvidia, and Rockstar Games, according to the BBC. The group also broke into and attempted to extort telecoms giant BT, Microsoft, Samsung, Vodafone, fintech firm Revolut, and Okta during a crime spree between 2021 and 2022. Repeatedly hitting the biggest names in tech signals confidence, and it showed a generation of would-be imitators that a single teenager could rattle a multibillion-dollar company.

3. What CyberLeek Actually Leaked, and When

The 2022 Rockstar Breach

The original leak set the scene years earlier. Ninety Grand Theft Auto 6 videos of varying lengths were uploaded to the GTAForums fan site, more than a year before the first official GTA 6 trailer was released. The access was almost comically improvised. The Rockstar hack was carried out while the attacker was under police protection at a Travelodge hotel, reportedly using only an Amazon Firestick, the television in his room, and a cell phone. During the breach, the intruder posted to the company's internal Slack: a message to all employees that read, "I am not a Rockstar employee, I am an attacker."

The 2026 Leaks and Full-Build Claims

The 2026 CyberLeek wave was different in scope and confidence. Operating under the name CYBERLEEK, the leaker claimed they have full build access, meaning more footage could surface at any time. One clip removed any doubt. A video shows the character Jason shooting the word "LEEK" into a wall with bullets, a detail that strongly indicates the account controls a playable build rather than merely circulating leftover test material. The releases were also drip-fed and conditional, tied directly to the coin's price milestones.

The Scale of the Stolen Data

The 2026 material spanned gameplay, maps, and cutscenes. Clips showed a plane flight across Vice City, a cutscene about VPN use, and combat sequences involving a knife and a taser that offered an early look at the game's user interface. Even so, the most feared outcome had not materialised. There is currently no verified public release of the playable build suggested by CyberLeek's footage. Files claiming otherwise are dangerous. Fake GTA 6 downloads claiming to contain the leaked build have begun circulating on piracy sites, with reports warning that some contain malware.

4. The CyberLeek Crypto Coin: A Direct Monetisation Playbook

How the Meme Coin Was Launched

The coin was the product, and the leaks were the marketing. Cyberleek is not a normal leaker: the operation was built to advertise the $CYBERLEEK Solana token from day one, the token launched on August 15, 2026, three days before any footage was even leaked, and every leaked clip since August 18 has featured embedded QR codes and watermarks pushing viewers to buy the token. Viewers were even given a role in the campaign. CyberLeek released several alleged GTA VI videos, promoting the $CYBERLEEK token alongside the footage, and users were directed to the cryptocurrency and could use it to vote on which leaked video would be released next.

Revenue Generated from the Token

The price action was wild and largely engineered. On August 19, 2026, the price was between $0.0017 and $0.0018. Blockchain data reveals that the token's massive early pumps were heavily driven by automated trading bots rather than organic community milestones. The team also took profits while claiming the opposite. On August 22, the team burned 270 million tokens, 27% of the supply, yet still retained a significant portion and profited from trading activity. After a later leak, an eighth-leak watermark read "To prove you wrong all dev tokens were just burned, now only collecting trading fees," a reminder that they are still actively earning through transaction fees.

Why This Is a Sophisticated Monetisation Strategy

The playbook is clever precisely because it launders notoriety into speculation. Milestones were used as leak triggers: Cyberleek delivered footage the moment the coin crossed a threshold, with one tracker clocking the coin at $2.6 million just before the milestone and questioning why anyone would put money into the project. Owning a meme coin is not, in itself, illegal, which gives the operator a thin layer of plausible deniability while the leaked footage does the actual work of driving demand. It is a textbook attention-to-money conversion, and it should also be a giant red flag for anyone tempted to buy.

5. Other Monetisation Methods: Ransomware, Extortion, and Data Sales

The Ransomware and Extortion Angle

Extortion was the older model, and Lapsus$ ran it hard. The extortionists demanded a £3.1 million, or $4 million, ransom, which was not paid, though the teens did use some of the swiped data to steal about £100,000, or $130,000, from five people's cryptocurrency wallets. Rockstar's case ended differently. In addition to Rockstar Games having to pay Lapsus$ $5 million to recover its data, other hacks involved threatening communications and stealing money from cryptocurrency wallets. The standard advice for companies is not to pay, because payment funds the next attack and rarely guarantees the data stays buried.

Dark Web Data Sales

Selling stolen source code, unreleased assets, and employee data on dark web markets is a classic monetisation route, and GTA 6 material would carry obvious value to pirates, cheat-makers, and rival studios. The catch is exposure: every sale creates another link in a chain that investigators can follow, which is why the CyberLeek operation leaned on a public token instead of quiet back-room deals.

Indirect Financial Gains: The Attention Economy

The newest income stream is simply being famous. Insider Gaming reported that the GTA 6 leaker CYBERLEEK is now making money from gameplay videos. GTA 6-related material is also being sold, alongside the manifesto, on CyberLeek's website. Merchandise, site sales, and viral clips all convert directly into revenue, which is a modern twist on old-school extortion.

6. Financial Damage to Take-Two Interactive and Rockstar Games

The $2 Billion-Plus Stock Value Wipeout

The market reaction was immediate and measurable. TTWO traded at $248.13 before the leaks spread on August 18, then slid to $232.84, a drop of $15.29 a share, cutting about $2.83 billion from Take-Two's market value by one tally. The bleeding was partly stemmed by the close. The stock later closed at $240.15, up 1.31%, with TTWO down 6.81% for the year and roughly $1.5 billion of the loss still outstanding. Context matters, though. Take-Two's company market cap is still worth over $43 billion, so it is not going out of business, but $2.83 billion is a big loss.

Operational and Development Costs

Beyond the share price sit the harder-to-quantify costs: emergency security remediation, legal work, and the drag on developer morale. Take-Two moved quickly on the legal front. A GTA 6 leak update noted Cyberleek released strip club footage after its crypto token hit a $3 million market cap, sparking Take-Two subpoenas, and if the subpoenas succeed the outcome could shape how publishers pursue anonymous leakers who monetize stolen footage through crypto.

Long-Term Business Impact

History suggests the commercial damage is limited. A 2022 breach pushed roughly 90 Rockstar clips online, yet sales never suffered. This time the market seems to agree. Pre-orders vastly beat the company's own forecasts, GTA 6 is still the surest commercial bet in entertainment on November 19, and the market is not pricing in a failed launch. Rockstar also had a plan to reclaim the narrative. An official GTA VI presentation was scheduled for Netflix on August 27, ahead of the game's November 19 launch priced at $79.99.

Want every euro you spend on games to work harder? Bleap gives you up to 20% cashback on gaming, streaming, and everyday spending, with 0% FX fees and no hidden charges. It is a self-custodial Mastercard, so you keep full control of your funds. Get the Bleap card →

7. The GTA 6 Hacker Identity: What Authorities Have Uncovered

Arrests and Legal Proceedings

For the 2022 breach, the key name is Arion Kurtaj. Arion Kurtaj, a member of the Lapsus$ hacking group, was behind a 2022 hack of Rockstar that revealed GTA 6 to the world more than a year before it was announced. Kurtaj, an 18-year-old member of the cybercrime group Lapsus$, was sentenced to an indefinite hospital order for leaking clips. He did not act alone. A 17-year-old was convicted for his involvement in Lapsus$ activities but cannot be named due to his age.

How They Were Caught, or Weren't

Kurtaj's case was shaped by his health and behaviour. The jury was told not to find Kurtaj, who is autistic, guilty or not guilty, as psychiatrists had earlier assessed that he was unfit to stand trial, so the panel was asked instead to decide whether he did the things he was accused of. Even custody did not stop him. Prosecutors said Kurtaj was caught red-handed circumventing his bail conditions when his hotel room TV was found with an Amazon Fire Stick that let him connect to cloud computing services with his smartphone.

How Much of the Group Remains at Large

The story is not closed. A man found liable for multiple high-profile hacks including a major leak of GTA 6 footage in 2022 has reportedly been released from the secure hospital where he had been held since 2023, and is now in prison awaiting a retrial. And crucially, the 2026 CyberLeek actor remains unidentified, a reminder that new players keep stepping in where old ones fall.

8. Legal Exposure vs. Financial Gain: Is It Worth It for CyberLeek?

Criminal Charges and Potential Sentences

The charge sheet in these cases is heavy. In the 2022 matter, jurors determined Kurtaj committed 12 offenses, including computer intrusion, blackmail, and fraud, while the 17-year-old was convicted of fraud, blackmail, and carrying out an unauthorized act to impair the operation of a computer. A US-based actor would face computer fraud, wire fraud, extortion, and money-laundering exposure, with the crypto element adding its own layer of financial-crime risk.

Asset Recovery and Crypto Seizure

This is where the meme-coin strategy looks fragile. Because the wallet trail is public, investigators do not need to guess where the money is. Those following the leaks think it is only a matter of time before the culprit is caught, in part based on how easy it seems to be to track down the leaker's primary crypto wallet. Subpoenas to centralised platforms are the likely next step, and law enforcement has a strong recent record of freezing and clawing back crypto proceeds from high-profile cases.

The Risk-Reward Calculation

Weigh it up honestly and the maths looks poor. The confirmed cash gains are uncertain and partly locked in a token that could crater, while the downside is prosecution across jurisdictions and potential asset seizure. The 2022 case shows how quickly a "victimless" leak turns into years of legal consequences. Notoriety in hacker circles may feel like currency, but it does not pay legal fees.

Holding crypto? Keep control of it, and skip the fees. Bleap offers fee-free trading with no gas costs and full self-custody, so your funds stay under your control from day one. When you spend, you get 0% FX fees and up to 20% cashback. Open a Bleap account →

9. Community and Media Amplification: How Coverage Became Currency

The Media Feedback Loop

Every article, video, and thread about CyberLeek doubled as free advertising for the coin. The leaks and the token were engineered to move together. The footage and the coin moved as one machine: CyberLeek released alleged GTA VI videos, promoted the $CYBERLEEK token alongside the footage, and directed users to the cryptocurrency. The more outlets covered the leaks, the more eyeballs landed on the QR codes baked into every clip.

Fan Communities as an Involuntary Marketing Engine

GTA's enormous fanbase became an unwitting distribution network. The Cyberleek site briefly went dark, sparking rumors of an arrest, but the leaks resumed with mirror sites springing up faster than takedowns can catch them. Every reshare pushed the brand, and the brand pushed the coin.

The Attention-to-Money Conversion Model

This is the real innovation. Modern hackers have borrowed influencer-economy tactics, using virality itself as the revenue engine. Around $11.8 million worth of the token was traded on August 18 alone, suggesting the coin and leak campaign may have been planned as part of the same rollout. In the crypto era, notoriety now has a direct dollar value, and CyberLeek monetised it in real time.

10. What Happens Next: Ongoing Threats, Law Enforcement, and Take-Two's Response

Remaining Leak Threats

The threat is not over while the actor claims full access. The person operating as CYBERLEEK claimed they have full build access, meaning more footage could surface at any time. A genuine source-code release would be the worst case, but so far the feared playable build has not appeared publicly, only malware pretending to be it.

Take-Two and Rockstar's Counter-Strategy

Take-Two's response has been legal pressure plus narrative control. A federal court granted Take-Two subpoenas targeting Microsoft, and the leaks continued past the initial list. Pairing courtroom action with the official Netflix reveal was a deliberate move to drown out the leaks with sanctioned marketing.

Industry-Wide Implications

The bigger lesson is for the whole industry. The bull case for GTA 6 remains intact. Some recovery has followed, with shares climbing back toward the $236 to $240 range, partly attributed to Take-Two not confirming any change in plans for the November 19 release. Expect tighter internal security, harder questions about insurance and liability, and more pressure on platforms hosting leaked content and scam token promotions.

Frequently Asked Questions

How much money has CyberLeek made from the GTA 6 leaks?

There is no verified total. The clearest income is from the meme coin: the creator invested about $29,000 into the coin and, while not profiting directly from sales, earns a transaction fee on every buy. With around $11.8 million traded on August 18 alone and a peak $25 million market cap on August 23, fee income likely reaches six figures, plus video and merchandise revenue. Treat all figures as estimates, not confirmed cash-outs.

What is the CyberLeek crypto coin and how much is it worth?

$CYBERLEEK is a token on Solana's blockchain that launched alongside a wave of alleged GTA 6 leaks, promoted by an anonymous, unverified source. Its price has been extremely volatile. On August 19, 2026, it traded between $0.0017 and $0.0018. The project has no verified team, no audit, and no proven utility, which places it firmly in high-risk, speculative territory.

Did Rockstar Games pay the CyberLeek ransom demand?

There is no confirmed CyberLeek ransom payment. Rockstar has generally stayed quiet on the 2026 leaks and pursued legal remedies instead. For context on the separate 2022 breach, Rockstar Games reportedly had to pay Lapsus$ $5 million to recover its data. Security experts broadly advise companies not to pay, since it funds further attacks.

How much money did Take-Two lose because of the GTA 6 leak?

A data breach on August 18 sent Take-Two's stock from $248 to below $233, wiping roughly $2.83 billion in market value as GTA 6 gameplay spread online. That is a market-cap figure, not an operational cash loss, and it partly recovered. Roughly $1.5 billion of the initial market-cap loss remained unrecovered based on the reported price moves.

Who is behind CyberLeek and have they been arrested?

The 2026 CyberLeek actor is unidentified. Nobody has confirmed their identity, location, or headcount. The separate 2022 breach was pinned on Lapsus$. Arion Kurtaj, an 18-year-old member of the group, was sentenced to an indefinite hospital order for leaking clips, and he has since been released from the secure hospital and is in prison awaiting a retrial.

What could happen to CyberLeek's crypto and cash earnings if convicted?

Likely seizure. Because the coin ran on a public blockchain, the trail is visible. The wallet that created the coin has reportedly been traced back to a KuCoin account, and KuCoin's policy allows law enforcement with a subpoena to receive identity information about account holders. Combined with Take-Two's active subpoenas, that makes tracing and clawing back proceeds a realistic outcome.

Conclusion: A New Playbook for Hacker Monetisation

CyberLeek's confirmed earnings sit somewhere in the six-figure range from token transaction fees, boosted by paper gains on a coin that peaked near a $25 million market cap and by video and merchandise income, but the honest answer is that no verified total exists. The bigger story is the method. CyberLeek did not just steal data, they built a monetisation funnel that fused media virality, crypto speculation, and extortion-style leverage into one machine, where the footage and the coin moved as one.

Against that sits real risk: a traceable wallet, active subpoenas, and the 2022 precedent showing where these cases end. For gaming companies and corporate America, the leak is a warning about how intellectual property can be financially weaponised in the Web3 era.

For everyone else, the takeaway is calmer. Skip the hype coins and keep control of your own money. If you are buying GTA 6 or spending on games and everyday purchases, Bleap gives you up to 20% cashback on gaming platforms, 0% FX fees, and fee-free, self-custodial crypto trading, with no monthly subscription. It is a debit card you can use anywhere Mastercard is accepted.