The Hyperliquid whale who made $20 million trading with extreme leverage has been identified today by ZachXBT, the well-known on-chain investigator, who exposed the trader via a post on X as William Parker, a British man with a criminal history tied to fraud, hacking, and casino theft.
Between January and March 2025, an anonymous trader placed a series of highly leveraged bets on Hyperliquid and GMX, turning six-figure positions into $20 million. The first major trade came from 0xe4d3, which longed ETH and BTC with 50x leverage just before President Donald Trump announced the crypto reserve. The move brought in $10 million. Shortly after, 0xf3f4 made a 40x leveraged BTC short, pulling in another $9 million.
Zach traced 0xf3f4’s transactions and uncovered a cluster of wallets linked to crypto casinos and exchanges, including Roobet, Binance, Gamdom, ChangeNOW, Shuffle, Alphapo, BC Game, and Metawin. The trader had also signed a message on X, stating he had made $20 million trading on GMX and Hyperliquid. But when Zach called him out, the posts were deleted immediately.
Zach said, “An analysis for the X account used by 0xf3f indicates it was likely purchased at a point in time (recent name change, years of inactivity, aged account). I saw they follow @CryptxxCatalyst who posted links to multiple phishing sites + replied to people trying to trick them.
“I reach reached out to @realScamSniffer about the phishing sites who regularly tracks them. A public address for the HL whale was set as the drainer fee receiver on the projection[.]fi phishing site in Jan 2025. 0x7ab8c59db7b959bb8c3481d5b9836dfbc939af21. 0x7ab also directly received $17.1K in Jan 2025 from another phishing draining customer prior to where his wallets became tracked this month.”
Casino exploits, Telegram leaks, and identity exposure
The earliest EVM address used by 0xf3f4 led back to casino withdrawals on Solana spread across four crypto-gambling platforms. One casino confirmed that the funds came from an input validation exploit, where the trader manipulated a game’s system to withdraw more than he deposited, and said that they had negotiated with the exploiter through a now-deleted Telegram account (7713976571), according to Zach.
Zach also said he tracked the Telegram account’s posts in GMX groups, where the user had asked for technical help at the same time 0xe4d3 was placing trades. A payment from 0xe4d3 was then traced to an unnamed person, who confirmed they had been paid directly by the Hyperliquid trader and provided a UK phone number.
That number was publicly linked to William Parker, who had been arrested in 2023 for stealing $1 million from two casinos in Finland, said Zach. Before that, Parker was known as Alistair Packover, making headlines in the UK for fraud and hacking-related charges in the early 2010s.
Right now, Parker’s funds are sitting untouched in 0x51d99A4022a55CAd07a3c958F0600d8bb0B39921, according to Zach.
After flipping BTC and ETH for millions, Parker turned to MELANIA, the meme coin allegedly launched by First Lady Melania Trump, and opened a long position for the second time.
By March 19, Parker’s only active position was the MELANIA long, and at first, the position was down $50,000, but after the identity leak and speculation on social media, the token rallied 10% in one day. MELANIA hit a one-week high of $0.77, flipping his unrealized losses into a $212,000 profit, said Zach.
The hype surrounding Parker’s trading had traders speculating. @qwatio, the X user Parker had previously interacted with, said once that MELANIA could challenge Official Trump (TRUMP) in the market cap if traders continued betting on its recovery. The meme market reacted to his comments aggressively, triggering a short-term pump, before MELANIA crashed yet again, according to data from CoinGecko.
Cryptopolitan Academy: Want to grow your money in 2025? Learn how to do it with DeFi in our upcoming webclass. Save Your Spot
