The GTA 6 Leaker Cashed Out Hours Before the Reveal, and the Timing Tells the Whole Story

Rockstar's "GTA VI: An Extended Look" hits Netflix today at 3:00 PM ET, capping nine days of unauthorized gameplay leaks that turned into one of the strangest side plots in the game's marketing history. But the more revealing story didn't happen on a red carpet or a livestream. It happened quietly, in the early hours of August 27, when the anonymous leaker behind the campaign known as CyberLeek pulled roughly $250,000 out of a memecoin they had spent over a week promoting, then watched it collapse by nearly half within a day.

For anyone who tuned out the CyberLeek saga after the first few clips, a quick recap. Starting in mid-August, an anonymous source began posting unreleased GTA VI gameplay footage in short, watermarked bursts, each clip stamped with QR codes and slogans pointing to a Solana token called $CYBERLEEK. The pitch was blunt: "higher market cap = more leeks." Every new leak was effectively an advertisement for the coin, and the coin's price moved in lockstep with the hype. At its peak on August 23, $CYBERLEEK carried a market cap north of $23 million, built entirely on the promise of more footage to come.

That promise ran out today. According to blockchain records reviewed by CoinDesk and Kotaku, the wallet tied to CyberLeek claimed roughly $146,000 in wrapped SOL plus more than 15 million tokens in accumulated creator fees, then dumped the entire position for about $125,000 in SOL, split across four wallets and routed partly through exchanges known for obscuring transaction trails. The token cratered almost immediately, down somewhere between 46% and 86% depending on which snapshot you check, and the market cap that once topped $23 million is now sitting closer to $3 million.

The part worth sitting with is the timing, not the amount. A quarter million dollars is real money, but it's small next to the scale of what Rockstar and Take-Two have built around this launch. What makes the exit interesting is that it happened in the exact window before the one event guaranteed to make CyberLeek's leverage worthless: an official, polished, Rockstar-sanctioned gameplay reveal. Once Netflix and Rockstar's own channels started circulating sanctioned footage this afternoon, nine days of shaky leaked clips instantly became old news, and so did any reason to keep speculating on a coin tied to them. CyberLeek didn't get caught. They read the calendar.

That's the pattern worth flagging for anyone watching how game leaks work now. This wasn't a traditional rug pull, where a creator vanishes the moment money comes in. CyberLeek reportedly burned 270 million unsold reserve tokens early on, a move designed to look like restraint and build trust in the token's legitimacy. The real payday came slower, through accumulated trading fees over more than a week of sustained attention, which is arguably a more patient and more cynical version of the same scheme. It also explains why the leaks themselves seemed to run thinner and more repetitive in their final days. Outlets covering the saga noted the watermark messaging had grown increasingly desperate, a sign the source material was drying up well before the money did.

It's worth asking what this means for the next high-profile leak, because there will be one. CyberLeek's approach essentially demonstrated a repeatable playbook: acquire something valuable, drip-feed it for attention, attach a speculative asset to that attention, and exit before the underlying leverage expires. That's a more sophisticated monetization model than the smash-and-grab leaks the industry is used to, and it's one that doesn't require the leaker to sell anything to a media outlet or a black-market buyer at all. The audience does the paying, voluntarily, in real time, chasing a chart.

None of this makes the leaker anonymous forever. Wallet activity is traceable, exchanges keep records, and law enforcement has successfully unmasked crypto-funded schemes before by subpoenaing the platforms the funds passed through. Whoever is behind CyberLeek just left a much longer financial trail than the original hack itself would have, which is a real risk they apparently decided was worth taking.

So today's split screen is worth remembering. At 3:00 PM ET, Rockstar and Netflix delivered the version of GTA VI hype that was always supposed to define this final stretch before the November 19 launch: produced, sanctioned, and controlled. A few hours earlier, in a much quieter transaction, the version of hype that ran alongside it for the past week quietly cashed out and left its remaining holders staring at a chart that fell off a cliff. Both are part of the same launch cycle now. Only one of them was ever going to end well for the people who showed up late.