According to Odaily Planet Daily, the chain detective ZachXBT released an investigation into British Faris Ali (Zay/Tommy), who was suspected of robbing a user of $4.3 million in June 2024 due to a cryptographic data leak. On June 18, a victim posted on X that he had been robbed earlier that day and was forced to transfer $4.3 million to two addresses. Most of the funds remain dormant. After the victim was marked, ZachXBT began an investigation and obtained the chat records of the two criminals a few hours before the robbery. Faris/Tommy discussed with his accomplices pretending to deliver a package to the victim's home and shared photos of the victim's door. They then sent photos of the victim's building and photos of three people dressed as delivery drivers. A few weeks ago, Faris/Tommy showed his bail photos to friends on Telegram, revealing his identity. After the robbery, someone registered the ENS domain name farisali.eth and sent a message on the chain.