CyberLeek GTA 6 Investigation — Live Tracker

REPORTED. Take-Two is hunting GTA 6 leaker CyberLeek through federal subpoenas against Microsoft, Discord, X, and Google, while on-chain investigators traced about $268,000 in crypto profits to exchanges and fresh wallets. REPORTED. New footage surfaced in October 2026: fuel-gauge clips, a 25-minute compilation video, and a 5-minute Lucia free-roam clip. REPORTED. On October 10, a site using the CyberLeek name posted "The Offer": a playable campaign build if the CYBERLEEK coin hits a $30M market cap. REPORTED. On October 14, the same operation declared "the end of the road": the coin never came close to $30M, so no build is coming, and the leaks stop "for now." OUR TAKE. The leaks were real, and the operation around them was a money machine. It ended the moment the money did.

• Oct 14: REPORTED. A site using the CyberLeek name posted a three-part statement titled "End of the Road," then removed it, declaring the leak campaign over "for now," per Mezha and GosuGamers. The statement's reason: "The 30M was not reached, so no build." REPORTED. The CYBERLEEK coin peaked at a $7.8M market cap on October 11 and crashed to about $1.2M after the announcement, per TheDailyGame. NOT CONFIRMED. That the statement comes from the original CyberLeek. The same attribution problem that hangs over "The Offer" hangs over the goodbye. OUR TAKE. The campaign did not end because of lawyers, conscience, or Rockstar. It ended because the coin died. That was always the engine.
• Oct 14: REPORTED. The statement claims the game's ending stays unpublished: the leaker says releasing it would punish Take-Two but ruin the experience for gamers "who did nothing wrong," per GosuGamers. REPORTED. It also threatens a dead man's switch: if the leaker is pursued or "removed," plot spoilers publish automatically, per Mezha. NOT CONFIRMED. The dead man's switch. In August, Insider Gaming retracted a dead man's switch story after finding a copycat had fabricated it. Same script, same doubt. REPORTED. A final video of about four minutes, titled "The End of the Road" and set to Journey's "Don't Stop Believin'," appeared alongside the statement, opening on Lucia in a barbershop, per Root-Nation. The leaker claims it shows final-mission clips out of context.
• Oct 11: REPORTED. A 5-minute-28-second free-roam clip focused on Lucia surfaced, per Sportskeeda and Insider Gaming. Lucia beats down an NPC at a Bank of Liberty ATM, robs $23, and banks the cash at a machine showing a $15,000 deposit limit and a "BuckMe" logo, then enters the Piker Financial Center and base jumps off the roof. NOT CONFIRMED. That the clip reflects the final game: Insider Gaming reports people who saw a demo say the game has no full nudity, which points to a development build. OUR TAKE. A $23 street robbery banked on the spot is the smallest complete money loop GTA 6 has shown: crime in, safe cash out.
• Oct 11: REPORTED. The CYBERLEEK token fell to about $3.2M in market cap after "The Offer" posted, per Dot Esports, leaving it roughly $27M short of the $30M trigger. REPORTED. Dot Esports also reports CyberLeek pulled about $250,000 in trading fees on the day of Rockstar's Extended Look premiere. REPORTED. The same announcement set a tiered reward ladder for more footage: $2M unlocks a Lucia bikini clip, $3M topless, $4M fully naked, and $6M "4K closeups," per TalkEsport and Forbes. OUR TAKE. A price ladder for exclusive clips is a subscription business, not a protest. Every tier is priced to keep buyers buying.
• Oct 10: REPORTED. A site using the CyberLeek name posted "The Offer": if the CYBERLEEK coin reaches a $30M market cap, they will release a playable campaign build. Alternatively, Take-Two can stop it by shipping physical disks and issuing a public apology, per ScreenRant. NOT CONFIRMED. That the site is run by the original CyberLeek or that anyone possesses a complete build. OUR TAKE. The token traded three days before the first leak, so treat this as crypto marketing until proven otherwise.
• Oct 8: REPORTED. A 25-minute "Extended Leek" video surfaced online, a parody of Rockstar's official Extended Look. Dataminer TexFunz2 described it as 367 MB of new footage and cutscenes; PCGuide reports 24 minutes 49 seconds at 387 MB, with first-person driving, detailed car customization, motorbike renting, racing, a closer look at the Thrillbilly Mud Club, and a tattooed Jason with a new hairstyle. Gameranx notes the video also carries story spoilers and the download links were strained by demand. A mystery poll on CyberLeek's website closed the same day.
• Oct 7: REPORTED. New gameplay clips show fuel and engine gauge icons inside GTA 6 cars. Insider NateTheHate says the footage comes from an old build. OUR TAKE. The gauges suggest fuel management is real gameplay, but an old build means it may not survive to launch. REPORTED. The clips were hit with copyright strikes, per GameCentral. OUR TAKE. Strikes suggest genuine Rockstar assets, but takedowns alone never prove a clip is real. Rockstar has not commented.
• Oct 5: REPORTED. A poll with unreadable "???" options appeared on CyberLeek's website, with paid crypto voting, per GamingBible and TechWiser. It closed October 8.
• Oct 2: No new developments publicly reported since Sep 25. No build has been released. CyberLeek's original website (cyberleek.ar.io) remains offline. No lawsuit, arrest, or criminal referral has been publicly reported. (Separate case, not CyberLeek: Dutch police arrested a 24-year-old suspect on Sep 28 in the ShinyHunters investigation into the April GTA Online revenue leak. Different group, different case.)

REPORTED. Yes, according to multiple outlets. On October 7, gameplay clips circulated showing Jason returning to a car with petrol and engine gauge icons appearing in the UI, suggesting fuel management exists in GTA 6. GameCentral reported the clips were hit with copyright strikes, and reliable insider NateTheHate said the footage is over a year old and comes from an old build.

On October 8, dataminer TexFunz2 reported that CyberLeek released 367 MB of GTA 6 footage, about 25 minutes long, titled as a parody of Rockstar's official Extended Look. PCGuide timed it at 24 minutes 49 seconds and 387 MB, reporting first-person driving, detailed car customization, motorbike renting, racing, a closer look at the Thrillbilly Mud Club festival, and Jason with a new hairstyle and tattoos pointing to deep character customization. Gameranx adds that the video carries story spoilers and that download links buckled under demand. GamesRadar and TalkEsport corroborate the release.

On October 11, a 5-minute-28-second clip focused on Lucia surfaced, reported by Sportskeeda and Insider Gaming. Lucia fights an NPC at a Bank of Liberty ATM with hand-to-hand moves distinct from Jason's, robs $23, and deposits the cash at the machine, which displays a $15,000 limit and a "BuckMe" banking brand. She then walks into the Piker Financial Center, speaks with an NPC, rides an elevator to the rooftop, and base jumps, with a checkpoint system resetting her after failed landings. REPORTED. Insider Gaming notes the clip shows Lucia unclothed, but people who saw a demo say the finished game has no full nudity, which points to a development build stripping the character model rather than final content. OUR TAKE. The spectacle is the nudity, but the news is the loop: dynamic street robbery feeding straight into ATM banking with a hard limit is a complete cash system, and it lines up with the banking mechanics fans have pieced together from earlier leaks.

Two facts collide here. REPORTED. Insider NateTheHate says the leaked footage is over a year old and comes from an old build. OUR TAKE. If the footage is old, the video is a time capsule, not a preview. Features visible in it, including first-person driving, may never ship in the final game.

The October activity followed a mystery poll on CyberLeek's website. GamingBible reported the poll's options were unreadable question marks, voting required crypto payment, and one option led with about 75 percent. Notebookcheck notes the wallet activity matches the original August operation, though it is not proven the same person is behind it.

OUR TAKE. Copyright strikes suggest the clips contain real Rockstar assets, but they do not confirm the footage reflects the final game. Old build plus aggressive takedowns equals real footage of an outdated game. Treat every mechanic as unconfirmed until Rockstar shows it, and treat every poll as a fundraiser until proven otherwise.

REPORTED. On October 14, a three-part statement titled "End of the Road" appeared on the site using the CyberLeek name, then was removed, per Mezha. Its message: the leaks stop here, "for now, at least." The stated reason was arithmetic, not remorse. The CYBERLEEK coin never reached the $30M market cap that "The Offer" set as the trigger for releasing a playable build. It peaked at $7.8M on October 11 and fell to about $1.2M after the announcement, per TheDailyGame. In the statement's own words, per GosuGamers: "The 30M was not reached, so no build."

REPORTED. The statement says uploading 200-plus gigabytes anonymously is a serious risk that was only worth taking if the milestone funded a "secret project," and insists the terms were "honoured as written." It denies the coin was a rug pull, calling purchases support and donations rather than investments, per GosuGamers and Mezha. It also claims the leaker holds the game's ending and chose not to publish it: releasing it "would punish Take-Two greatly" but "ruin the experience for the gamers, who did nothing wrong," and in the leaker's judgment, "Take-Two was punished enough." A final video of about four minutes, also titled "The End of the Road" and scored to Journey's "Don't Stop Believin'," was posted alongside it, opening on Lucia in a barbershop, per Root-Nation. The leaker claims it shows clips from the final missions, out of context, revealing nothing.

NOT CONFIRMED. That any of this comes from the original CyberLeek. The statement appeared on the same site whose link to the original operation Wolf's Gaming Blog could not verify in September, detailed in the section below. NOT CONFIRMED. The dead man's switch the statement threatens, under which plot spoilers would publish automatically if the leaker is pursued or arrested. The last time a CyberLeek dead man's switch made headlines, Insider Gaming retracted the story after finding a copycat had fabricated it.

OUR TAKE. Read the exit against the whole timeline and it confirms what the money trail already said. The coin launched three days before the first leak. The leaks ran while the coin traded. The cashout happened the morning of Rockstar's premiere. The comeback ran on a market-cap trigger. And the campaign ended the week the coin collapsed. The leaks were never the product. The coin was the product, the leaks were the marketing, and a marketing campaign ends when the budget does. "For now" is doing real work in that statement: if the coin ever pumps again, expect the leaks to find a reason to return.

On September 19, a Telegram channel using the CyberLeek name posted: "It's been a while since you've heard from me. The last few days I've been working on setting up a Server to host the first GTA VI full build." A linked website claimed a dead man's switch was active and offered to pay people who post about it.

The Source Problem

Wolf's Gaming Blog, the outlet that first reported the message, updated its story on September 21. Its findings: the Telegram channel did exist during the original leak wave and hosted genuine footage at the time, but there is no clear link between that channel and CyberLeek's original website, cyberleek.ar.io, which is still offline. The new website and the Telegram channel link to each other, which only proves they are connected to each other, not that either is run by the original CyberLeek. Given the copycat accounts, it may simply be another impersonator.

REPORTED. A Telegram channel using the CyberLeek name posted the "full build" message on September 19, per Wolf's Gaming Blog. NOT CONFIRMED. That the channel is operated by the original CyberLeek. NOT CONFIRMED. That anyone possesses a complete build of GTA 6. Rockstar and Take-Two have not confirmed any such build was compromised, and there is no independent evidence.

The last time reports circulated about a CyberLeek dead man's switch, Insider Gaming published the story and then retracted it after discovering the statement had been fabricated by a copycat. Whoever runs the new site appears to have copied a script that was already proven to be fiction.

October 10: The $30M "Offer"

REPORTED. On October 10, a site using the CyberLeek name posted "The Offer": the CYBERLEEK coin reaching a $30M market cap would trigger the release of a playable campaign build, per ScreenRant. Alternatively, Take-Two can stop it by releasing physical disks and issuing a public apology. The site's own statement expects refusal: "Everyone knows which one they'll pick."

NOT CONFIRMED. That this site is operated by the original CyberLeek. NOT CONFIRMED. That anyone possesses a playable campaign build. This follows the exact pattern of the September 19 "full build" message that Wolf's Gaming Blog could not link to the original operation.

OUR TAKE. The CYBERLEEK token launched three days before the first leak, so a market-cap trigger is a coin pump mechanism, not a leak plan. Treat it as marketing until proven otherwise.

They Are Paying People to Spread It

The website pushing the dead man's switch claim openly asks visitors to post about it and submit the link, promising: "We verify, we pay." That is a paid promotion campaign, not a leak. The October mystery poll ran the same playbook: paid crypto voting on unreadable options. We are not linking the site. Sending it traffic is exactly what it is paying for.

OUR TAKE. Zero independent evidence a complete build exists, a source that may be an impersonator, a documented precedent of fabrication, and a paid promotion campaign behind it. As of October 10, 2026, this is not real.

Every leak cycle produces fake downloads, and this one is no different.

• A 113GB "GTA 6 PC build" torrent circulated in August. TweakTown reported it was fake and reportedly contained malware that could compromise your system and expose your data.
• Circulating ISO files contain remote access Trojans, password theft, and ransomware, according to cybersecurity firm Huntress, via a video breakdown of the current scam landscape.
• Fake countdown pages load wallet drainers the moment you open them, draining crypto wallets before you click anything.
• Sites using the CyberLeek name are selling "launchers." At least one asks visitors to send $100 in cryptocurrency for "lifetime access" to a supposed leaked build.
• There is no official PC version of GTA 6. The game launches November 19, 2026 on PS5 and Xbox Series X|S only.

The rule: anything asking you to download a GTA 6 "build," pay crypto for access, buy a coin to trigger a release, or vote in a paid poll is a scam. Do not run it, do not pay it, do not share it.

August 18: CyberLeek surfaces. The first clips appear. Over nine days, fourteen gameplay videos are released from what appears to be a playable build of GTA 6.

August 20: Take-Two's lawyers at Kirkland and Ellis file DMCA subpoenas against Microsoft and Discord in the U.S. District Court for the Southern District of New York, demanding device identifiers, IP addresses, phone numbers, linked accounts, and OneDrive contents for accounts in three named Discord servers since June 1. That covers approximately 107,000 Discord accounts. REPORTED via Kotaku, Tom's Hardware, PC Gamer.

August 21: Take-Two files separate DMCA subpoenas against X and Google, naming three X handles and three YouTube channels.

August 22: Discord publicly states it has not been formally served yet. The same day, Insider Gaming publishes the fake "dead man's switch" story, then retracts it.

August 25: Take-Two withdraws the YouTube and Google subpoenas. The filing describes the investigation as "rapidly evolving."

August 26: Rockstar issues an official statement calling the leaks "heartbreaking." The first and only official acknowledgment the footage is genuine.

August 27: The Extended Look premieres on Netflix. On-chain investigators later trace approximately $268,000 leaving CyberLeek's transaction fee pool in the hours before the premiere. REPORTED via Dexerto, Finbold, GameRiv, CryptoRank.

August 28: Take-Two files a second, sealed subpoena targeting two specific Discord users.

Late August: GTAForums user Vice Cit publishes a two-part investigation tracing the crypto operation. Researcher xorextrace publishes a separate on-chain analysis confirming the money movements: a KYC-verified KuCoin account ($99,000), CCE.Cash ($84,000), and ~$91,000 across fresh wallets.

September 1: A federal judge grants the seal on the subpoena targeting two Discord users.

Early September: Stop Killing Games publicly repudiates CyberLeek. Director General Moritz Katzner tells supporters not to send money and calls the illegal means "unacceptable."

September 4: The original deadline for Microsoft and Discord to respond. No public response reported.

September 19: A Telegram channel using the CyberLeek name claims to be preparing a "full build" release. A linked website claims a dead man's switch and offers to pay promoters.

September 21: Wolf's Gaming Blog updates its report: it cannot link the channel to the original CyberLeek website, and says it may be an impersonator.

October 2: No new developments publicly reported since September 25.

October 5: A mystery poll with unreadable options appears on CyberLeek's website, with paid crypto voting, per GamingBible and TheGamer. Voting closes October 8.

October 7: New gameplay clips show fuel and engine gauges in GTA 6 cars. The clips are hit with copyright strikes. NateTheHate says the footage is from an old build.

October 8: A 25-minute "Extended Leek" video surfaces, reported by GamesRadar via dataminer TexFunz2, allegedly with new cutscenes and first-person gameplay. The website poll closes.

October 10: A site using the CyberLeek name posts "The Offer": a playable campaign build if the CYBERLEEK coin reaches a $30M market cap, or Take-Two ships physical disks and apologizes publicly. No independent proof a build exists. REPORTED via ScreenRant.

October 11: A 5-minute-28-second Lucia free-roam clip surfaces: an ATM robbery for $23, a $15,000 "BuckMe" deposit limit, an enterable Piker Financial Center, and a rooftop base jump. The CYBERLEEK token sits near $3.2M, roughly $27M short of the "Offer" trigger. REPORTED via Sportskeeda and Insider Gaming.

October 14: A three-part "End of the Road" statement appears on the site using the CyberLeek name, then is removed: the leaks stop "for now" because the coin missed its $30M target, so no build will be released. The coin falls from a $7.8M peak on October 11 to about $1.2M. The statement claims the game's ending stays unpublished and threatens a dead man's switch of plot spoilers if the leaker is pursued. A final four-minute video of the same name is posted alongside it. REPORTED via Mezha, GosuGamers, and TheDailyGame.

The first round of subpoenas was a net: 107,000 accounts across three Discord servers. That is a dragnet designed to find a trail.

The sealed subpoena filed August 28 is a spear. It targets two specific users. Take-Two asked the court to keep it sealed, and the court agreed on September 1. The stated reason: making the filing public could give the targets time to destroy evidence or flee.

What sealing means in practice: the two targeted users do not know they are targeted. They cannot see what Take-Two has filed or what the investigation has already found. What it does not mean: the seal does not hide the investigation from Microsoft or Discord. Those companies received the subpoenas and are expected to produce the data.

The X subpoena names three handles: @cyberleek_ar_io, @cyberleekario, and @MrCyberLeek. All three are now suspended. For each, Take-Two demanded account IDs, registration emails, IP access logs, phone numbers, connected accounts, and device identifiers going back to June 1. REPORTED via TorrentFreak.

The YouTube/Google subpoena names three channels: CyberLeeks, Surfer24k, and Cyberleek_ar_io. Surfer24k also appears in the Discord subpoena, so Take-Two can cross-reference records from both platforms against the same person. cyberleek_ar_io appears on both the X and YouTube subpoenas.

CyberLeek watermarked later videos with "CYBERLEEK DOES NOT HAVE TWITTER," meaning the X accounts may be redistributors rather than the original source. Take-Two filed on them anyway. The trail from a copycat can still lead back to the source.

Five named handles across X and YouTube. Two unnamed Discord users under seal. Seven accounts in Take-Two's legal crosshairs across four platforms.

CyberLeek's operation was built to make money. It did. The Solana memecoin attached to the leaks was not a side project. It was the product. Every leaked clip drove attention, every attention spike drove trading volume, and every trade generated transaction fees for the creator.

Vice Cit's GTAForums investigation pieced together the full operation:

• Setup cost: approximately $29,000 for the coin and website
• Day-one volume: $15 million in trading, generating roughly $30,000 in fees, recouping the investment immediately
• Running daily fees: approximately $4,400 per day while the coin kept trading
• Total fees before the cashout: estimated $40,000 to $60,000
• The August 27 cashout: approximately $268,000 withdrawn from the fee pool, split to KuCoin ($99,000), CCE.Cash ($84,000), and ~$91,000 across fresh wallets
• The token burn: 270 million tokens burned publicly to build trust, then the fees were cashed out

The money trail does not just point toward a person. It may already end at one. KuCoin requires government-issued ID verification. If CyberLeek moved six figures through a verified exchange, that exchange holds a name, an address, and a document. The blockchain is public and permanent.

The data demands tell the story. MachineGuid is a Windows device identifier unique to each physical machine. If the same MachineGuid appears across accounts, those accounts belong to the same computer. Registration and login IP addresses place a device at a physical location. Phone numbers and linked accounts connect a username to a real identity. OneDrive contents are the most aggressive ask: not metadata, but files.

The scope since June 1 matters. The first clip appeared August 18. Take-Two believes the planning or acquisition began at least two and a half months before the first post.

During the enforcement wave, Take-Two's DMCA vendor flagged over 300 posts on X in a single notice. One belonged to a journalist who had posted screenshots of public court filings. The journalist was locked out of their X account. GameSpot and Grok were caught in the same sweep. The claims were later retracted. REPORTED via Cosmic Book News.

This does not affect the legal merit of the investigation. It shows the scale of the enforcement operation and the blunt nature of automated DMCA sweeps. It also explains why "takedown" alone never proves a specific clip is real: the same machine guns down real and fake material alike.

No. Stop Killing Games, the consumer advocacy campaign behind a 1.4 million-signature petition and a 435 million euro lawsuit against Sony over server shutdowns, publicly repudiated CyberLeek. Director General Moritz Katzner told supporters not to send money "no matter how much sympathy they feel," called the illegal means "unacceptable," and noted that the people taking the hit are "the thousands of developers who made the game."

The distinction matters: Stop Killing Games has a courtroom. CyberLeek has a memecoin.

The leak campaign has declared itself over. The legal case has not. Three threads remain open:

1. Take-Two files a civil lawsuit naming specific individuals. The subpoena data gives them names. The KuCoin trail may give them an identity independently. A case involving $268,000 in memecoin profits attached to stolen IP means substantial potential damages. Nothing about the October 14 goodbye changes this. Quitting does not unfile a subpoena.

2. A criminal referral. Computer fraud, wire fraud, and IP theft all carry criminal penalties. The 2022 Arion Kurtaj case established that courts take GTA leak cases seriously. Rockstar told that court the breach cost $5 million. The "End of the Road" statement's dead man's switch threat, spoilers released if the leaker is arrested, only makes sense as a hedge against this outcome.

3. The campaign restarts anyway. The statement says the leaks stop "for now." The coin is the trigger in both directions: it ended the campaign when it collapsed, and a future pump is the most likely reason it would ever resume. Watch the token, not the statements.

REPORTED. Per GameCentral citing Bloomberg, Rockstar has not yet identified the leaker. Per gtaintel, nothing new has been filed on the public docket since August 31.

We graded every CyberLeek clip against the Extended Look and creator previews. Of fifteen major mechanics visible across fourteen clips, the Extended Look and creator previews confirmed fourteen. The full resolution table is in our archived leak tracker.

The footage was real. The mechanics were real. The operation was a scam. All three were true at once. VCH said that on day one.

• REPORTED. Take-Two filed subpoenas against Microsoft and Discord on August 20, demanding device IDs, IPs, phone numbers, linked accounts, and OneDrive contents for accounts in three named servers since June 1.
• REPORTED. A sealed subpoena filed August 28 targets two specific Discord users. A federal judge approved the seal on September 1.
• REPORTED. Take-Two named five handles across X and YouTube subpoenas: @cyberleek_ar_io, @cyberleekario, @MrCyberLeek, CyberLeeks, Surfer24k, and Cyberleek_ar_io.
• REPORTED. On-chain investigators traced approximately $268,000 from the CyberLeek fee pool to KuCoin ($99K), CCE.Cash ($84K), and ~$91K in fresh wallets.
• CONFIRMED. Rockstar called the leaks "heartbreaking" on August 26, the first official acknowledgment the footage was genuine.
• OUR TAKE. We graded every clip: 14 out of 15 leaked mechanics check out against the Extended Look and creator previews.
• REPORTED. Fake GTA 6 "builds" are circulating, including a 113GB torrent with reported malware, ISO files with remote access Trojans per Huntress, and wallet-drainer countdown pages.
• REPORTED. The October 7 clips were hit with copyright strikes, per GameCentral. Rockstar has not commented on them.
• REPORTED. The October 8 "Extended Leek" video runs about 25 minutes with first-person driving and deep vehicle customization. Insiders say the footage is from an old build, so those features may not reflect the final game.
• REPORTED. On October 10, a site using the CyberLeek name posted "The Offer": CYBERLEEK coin to $30M market cap and they release a playable campaign build. No independent proof a build exists, and the site may be an impersonator.
• REPORTED. On October 11, a 5-minute-28-second Lucia clip showed an ATM robbery for $23, a $15,000 "BuckMe" ATM deposit limit, and an enterable financial center with a rooftop base jump. The footage comes from a development build, so the mechanics are not confirmed for launch.
• REPORTED. On October 14, the operation declared "the end of the road": the leaks stop "for now" because the coin missed its $30M target, falling from a $7.8M peak to about $1.2M. No build will be released under the offer's terms.
• NOT CONFIRMED. That the October 14 statement comes from the original CyberLeek, or that its threatened dead man's switch of plot spoilers exists. The last dead man's switch claim in this saga was fabricated by a copycat and retracted by Insider Gaming.
• NOT CONFIRMED. That the September 19 "full build" channel is run by the original CyberLeek, or that anyone possesses a complete build.
• NOT CONFIRMED. That the October poll, the October 25-minute video, the October "$30M Offer", or the October 11 Lucia clip come from the original CyberLeek.
• OUR TAKE. The footage was real and the mechanics mostly checked out. Everything built on top of it, the coin, the paid polls, the "full build," the launchers, was a money operation wearing a leak as a costume. The goodbye proves it: the campaign ended the week the coin did.

Has CyberLeek been identified?

NOT CONFIRMED. No arrest, charge, or public identification has been reported. Take-Two's subpoenas demand the data that could name names, and the KuCoin trail may independently lead to an identity, but as of October 16, 2026, nothing is public. Per GameCentral citing Bloomberg, Rockstar has not yet identified the leaker either.

Has CyberLeek stopped leaking?

REPORTED. Yes, by the operation's own announcement. On October 14, a three-part "End of the Road" statement on the site using the CyberLeek name declared the leaks over "for now," because the CYBERLEEK coin failed to reach the $30M market cap that would have triggered a build release, per Mezha and GosuGamers. NOT CONFIRMED. That the statement comes from the original CyberLeek, and "for now" leaves the door open if the coin ever recovers.

Did CyberLeek release new GTA 6 footage in October 2026?

REPORTED. Yes, according to GamesRadar and TalkEsport. Clips showing fuel and engine gauges surfaced October 7, and a 25-minute "Extended Leek" video surfaced October 8 via dataminer TexFunz2, reportedly with new cutscenes and first-person gameplay. A 5-minute-28-second Lucia free-roam clip followed on October 11, showing an ATM robbery and ATM banking, per Sportskeeda and Insider Gaming. A final four-minute "End of the Road" video followed the October 14 goodbye statement. Insider NateTheHate says the footage comes from an old build.

Do the leaked clips show fuel management in GTA 6?

REPORTED. The October 7 clips show petrol and engine gauge icons in the car UI. OUR TAKE. The gauges suggest fuel management is real gameplay, but NateTheHate says the footage is over a year old, so it may not reflect the final game. REPORTED. Copyright strikes on the clips, per GameCentral, suggest genuine Rockstar assets.

Does CyberLeek actually have the full GTA 6 build?

NOT CONFIRMED. A Telegram channel using the CyberLeek name claimed on September 19 to be preparing a full build release, and on October 10 a site using the name posted "The Offer": CYBERLEEK coin hits a $30M market cap and they drop a playable campaign build. On October 14 the same operation said the target was missed, so no build is coming. But the outlet that first reported the September claim says the channel may be an impersonator, and the same doubt applies to the site. Rockstar and Take-Two have not confirmed any complete build was compromised. There is no independent evidence.

Is it safe to download the leaked GTA 6 build?

OUR TAKE. No. There is no verified downloadable build of GTA 6 anywhere, and everything circulating matches known scam patterns. REPORTED. The circulating files are scams: a fake 113GB torrent with reported malware, ISO files containing remote access Trojans per cybersecurity firm Huntress, wallet-drainer countdown pages, and sites selling $100 crypto "launchers." Do not download, pay, or share.

Does GTA 6 have first-person mode?

REPORTED. The October "Extended Leek" video shows first-person driving, per PCGuide and GamesRadar. NOT CONFIRMED. Whether first-person driving survives to launch. OUR TAKE. Combined with insider claims the footage is over a year old, first-person looks like a feature from an old build, not a confirmed launch feature.

Does GTA 6 have ATM banking?

REPORTED. The October 11 clip shows Lucia depositing cash at a Bank of Liberty ATM that displays a $15,000 limit and a "BuckMe" brand, per Sportskeeda and Insider Gaming. NOT CONFIRMED. Whether ATM banking works the same way at launch, because the footage comes from a development build.

How much money did CyberLeek make from the GTA 6 leaks?

REPORTED. Approximately $268,000 was traced leaving the CYBERLEEK transaction fee pool on August 27, split to KuCoin ($99K), CCE.Cash ($84K), and ~$91K across fresh wallets, per Dexerto, Finbold, and GameRiv. Setup cost was about $29,000, recouped on day one of trading. Two independent on-chain analyses traced the trail.

• Every CyberLeek Clip, Graded Against the Extended Look
• Where the CyberLeek Token Money Went
• Rockstar's Official Statement on the GTA 6 Leaks

Join free and we'll send the Day-One Money Plan before November 19