Ethan Crossfield 
Financial activity surrounding the latest Grand Theft Auto 6 leak has created a new line of inquiry for Take-Two Interactive and Rockstar Games. The person or group using the name CyberLeek reportedly moved about $270,000 generated through the $CYBERLEEK cryptocurrency, although the transfers do not prove that the funds were converted into cash or that an identification is imminent.
How the CyberLeek Operation Made Money
CyberLeek began publishing unauthorized GTA 6 gameplay on August 18. The footage reportedly included driving, combat, unexplored locations, and other activities that had not previously been shown publicly. Alongside the videos, the operator promoted the $CYBERLEEK token through watermarks, links, and QR codes. Blockchain activity tracked by users on the GTA Forums suggests the operation earned much of its money from transaction fees tied to trading rather than simply selling a large personal token holding. Those fees were estimated to have reached the hundreds of thousands of dollars over roughly a week.
Around $270,000 Reportedly Leaves the Wallets
An August 27 analysis by Vice Cit, published on the GTA Forums, estimated that approximately $270,000 in transaction-fee proceeds had been withdrawn. The analysis placed the initial operating cost at about $29,000, which could leave roughly $241,000 in profit if no further activity takes place. The reported proceeds were divided into four transactions and sent toward multiple destinations, including the KuCoin cryptocurrency exchange and the swapping service CCE.Cash. Some funds were still held in separate wallets when the analysis was published. Moving assets between wallets is evidence of a transfer, not confirmation that the entire sum has been exchanged for fiat currency.
What the Transactions Could Mean for the GTA 6 Investigation
The distribution of the funds has led to speculation that more than one person may be involved. Vice Cit suggested that different withdrawal methods could reflect separate roles, such as one participant providing the leaked material while another manages the promotional and financial operation. That interpretation remains unconfirmed and is based only on blockchain activity. However, transfers involving centralized services could give investigators useful leads because those companies may retain account and transaction records. Take-Two has already sought information from Microsoft and Discord concerning the spread of the leaked footage, while Microsoft has said it is working with Take-Two and Rockstar to protect their intellectual property.
A Possible Shift in the Leak Campaign
The reported withdrawals arrived as Rockstar prepared to retake control of the GTA 6 discussion with Grand Theft Auto 6: An Extended Look scheduled for August 27 at 3 PM ET. The game is still set for release on November 19. The timing may suggest that CyberLeek is reducing its activity, but the untouched wallets and lack of confirmation about the leak campaign’s end make that impossible to establish. For now, the cash-out marks a change in the investigation rather than a confirmed breakthrough.
Key points
- CyberLeek reportedly moved about $270,000 in $CYBERLEEK transaction-fee proceeds.
- The operation’s estimated setup cost was approximately $29,000.
- Funds were split across four transactions and sent to several destinations.
- Blockchain activity may provide leads, but CyberLeek’s identity remains unknown.
Expert View
The episode highlights how leak campaigns can combine unauthorized game footage with fast-moving online financial schemes. For Rockstar and Take-Two, the crypto trail may be more actionable than anonymous reposts because centralized services can potentially connect wallet activity to account information. It also shows why the community should treat blockchain estimates carefully: visible transfers can indicate movement and organization, but they do not establish who operated CyberLeek, how many people were involved, or whether the campaign has ended.
