According to TechFlow news on December 29, according to "on-chain detective" ZachXBT, a Canadian cyber threat actor named Haby (Havard) stole more than $2 million in crypto assets in the past year by impersonating Coinbase customer service to conduct social engineering scams. The hacker squandered the proceeds on rare social media usernames, nightclub purchases, and gambling.

The investigation revealed that Haby has recently frequently purchased expensive Telegram usernames and deleted his recent account two days ago. Through open-source intelligence analysis of its social media story posts, investigators determined that Haby was located in Abbotsford, near Vancouver, Canada. ZachXBT said that while Canadian law enforcement agencies may already be aware of Haby's existence, the region rarely prosecutes such cyber threat actors.