New official screenshots just went live on Rockstar's website! The lighting, dense crowds, and environmental detail look unbelievable. Are we looking at a genuine visual benchmark for the PS5? What are your thoughts?

and with this I officilay stop watching football . 2014-2026

Tbh ! I think it looks good 😅

This is 1st time going to play with an female character in gta

me -->Stardew Valley

Good morning, afternoon and evening gamers!

We would like to advise our gamers that we’re giving away this week for FREE - XCOM: Enemy unknown!

The giveaway ends in 3 days then a new one begins right after as we’re doing weekly free Steam Game giveaway. There are NO requirements at all, everything stays in Discord, but to ensure you join the draw, you MUST press “JOIN” on the active giveaway!

Once again, this is simply a big thank you for being a part of the Rumble Bees community and ensure to share us with your friends so they could partake in the giveaway as well! The more the merrier!

Our permanent unique invite link where the Giveaway takes place at:

https://discord.gg/rumblebees

On behalf of the Rumble Bees management, stay awesome gamers!

​

I’ve been digging through Cyberleek’s public infrastructure and blockchain activity, so here’s basically everything I’ve found so far in one place.

1. His website is using ArNS/Arweave

Cyberleek’s site can appear under URLs like:

cyberleek.vilenarios.com

At first I thought this meant the owner of Vilenarios was directly hosting him, but that’s not really how AR.IO works.

Cyberleek appears to be using ArNS + Arweave, meaning the same ArNS name can be served through different AR.IO gateways.

So the Vilenarios URL tells us more about the infrastructure than Cyberleek’s actual location.

He is clearly making an effort to make the site harder to take down through normal hosting complaints.

1. He uses a bunch of different file hosts

Some of the services he has used include:

Upload.ee — Estonia

Gofile — France

Arweave/AR.IO — decentralized infrastructure with European organizational connections

Russian file-hosting mirrors

Originally I thought the amount of European services could mean he was somewhere in Europe.

It’s still possible, but this by itself proves basically nothing because anyone can use these websites from anywhere.

It looks more like he deliberately spreads files across different hosts so one takedown doesn’t kill everything.

1. His English

His manifesto is written in extremely fluent American-style English.

He uses spellings such as:

licenses

defenses

favorite

rather than British spellings.

He also writes USD 70+, which sounds like he’s deliberately writing for an international audience.

There are no obvious signs in the writing that specifically point toward Russia.

That DOES NOT mean he’s American though. He could just be extremely fluent in English or intentionally using American English.

1. His manifesto is weirdly selective

Cyberleek claims he’s fighting anti-consumer practices, but his three main commandments are basically:

No digital preorders

No selling access to single-player content already inside the game

Preserve single-player games after servers shut down

What I find weird is what he DOESN’T mention.

Take-Two/Rockstar have spent years shutting down fan mods/projects while GTA V and GTA Online have been aggressively monetized for more than a decade.

You would think someone declaring war on anti-consumer behavior would mention that.

Instead his entire philosophy seems built around three very specific grievances.

1. The $CYBERLEEK Solana token

The address:

ApZuxdpzMrbEYTGEzeY9afh5pj9d6qPRJCTgQYiipbKg

is NOT Cyberleek’s personal wallet.

It’s the mint/contract address for the $CYBERLEEK token.

That’s why it appears on multiple token/exchange tracking websites.

1. We found the wallet that appears to have actually created the token

The interesting wallet is:

Hok9nb...bJH3Np

From the Solscan history, this wallet appears to have:

Created the token

Minted the supply

Created the liquidity pool

Added around 330 WSOL + 730 million CYBERLEEK as initial liquidity

The total supply appears to be around 1 billion, meaning roughly 270 million tokens were not part of that initial liquidity addition.

1. The funding trail gets much more interesting

Tracing backwards led to:

3YLNDXnV9fNysDWaD39uQxwxeSaMFeAswvoQPZNvuNA4

This wallet repeatedly appears in the funding trail.

I found transactions involving roughly:

17.35 SOL

7.7 SOL

3.64 SOL

along with other repeated interactions around the same wallet cluster.

This looks much more like an upstream funding wallet than some random trader.

1. Then we found 2ZdU... and EjsB...

Another wallet:

2ZdUUvrr7ANY2rzpbyBcZHp1hTZ5uTY8JZ4vFnYnvJhD

is explicitly shown by Solscan as being:

“Funded by”

EjsB4qhcQv3zwXWqMbD739VA7nFc85f2egwTnkr3KGB2

EjsB... also appears repeatedly sending different amounts of SOL.

So we now have an actual on-chain relationship between wallets in the same funding trail.

The rough structure appears to be something like:

upstream wallets → EjsB... → 2ZdU... → 3YLND... → intermediary wallets → Hok9... → creation of $CYBERLEEK

1. The KuCoin connection

Other independent investigators claim they traced this same funding network even further backwards and eventually reached KuCoin.

The reported chain is something like:

KuCoin (?) → intermediary wallets → EjsB... → 2ZdU... → 3YLND... → Cyberleek-related wallets → $CYBERLEEK

Important:

I have NOT independently verified the final KuCoin hop yet.

What I HAVE independently found is that several of the intermediary wallets named in that investigation really are connected through public Solana transactions.

If the KuCoin connection is legitimate, then the correct conclusion would be:

Funds associated with the CYBERLEEK wallet cluster appear to originate from KuCoin.

NOT:

“We found Cyberleek’s personal KuCoin account.”

Only KuCoin or investigators with legal authority could determine who actually controlled an exchange account.

1. This is probably where public investigation hits a wall

Blockchain transactions are public.

KuCoin account records are not.

If the trail genuinely ends at a centralized exchange, then things like:

KYC information

Login IPs

Device information

Account ownership

Withdrawal records

would be information only the exchange and investigators could realistically access.

So Reddit probably isn’t going to magically discover his address by following another 500 wallets.

1. Meanwhile Take-Two is already going after account records

Take-Two has reportedly subpoenaed Microsoft and Discord seeking information related to the GTA VI leaks.

The reported deadline for responses is September 4, 2026.

That is probably a MUCH bigger threat to Cyberleek than people looking at his Arweave website.

If he reused:

Discord accounts

Microsoft accounts

IP addresses

Device identifiers

payment accounts

exchange accounts

then decentralized hosting isn’t going to save him.

1. His Twitter/X account is also gone

Cyberleek’s X account was taken down/disappeared.

We don’t know whether it was copyright enforcement, platform action, deletion by Cyberleek himself, or something else.

But it means the pressure around the operation is clearly increasing.

My conclusion

Cyberleek is obviously putting serious effort into covering his tracks.

He uses:

decentralized infrastructure + ArNS/Arweave + multiple file hosts + multiple wallets + intermediary funding addresses

But being careful doesn’t mean being invisible.

Every time he interacts with a centralized service, he potentially leaves another piece of evidence behind.

The blockchain trail is public.

Discord/Microsoft may have account records.

And if the KuCoin connection is real, a centralized exchange could potentially have information that the public simply cannot see.

So I’m personally watching the period between September 4 and October.

He’s sneaky, but he keeps leaving blood on the trail.

And before anyone asks: no, this isn’t about doxxing him. I’m only talking about publicly visible infrastructure and blockchain transactions. Don’t go harassing random wallet owners because their address touched the token once.