Blockchain investigator ZachXBT has published a detailed report accusing several Axiom employees of abusing internal access to view users’ private wallet and account data. According to the report, the conduct lasted for more than a year and was used to monitor the on-chain activity of traders and KOLs, with one alleged scheme designed to help an associate make $200,000 in a short period.
Report says users could be tracked by ref code, wallet address, or UID
The report names Broox Bauer, known on X as @WheresBroox, a senior business development employee at Axiom. In an audio recording from a private group chat, Broox allegedly described how he could use Axiom’s internal tools to track any user through a referral code, wallet address, or UID, and claimed he could find nearly any information connected to that person. He also said he would start by studying 10 to 20 wallets before expanding the scope and mapping their trading behavior over time.
ZachXBT’s report notes that Axiom was founded in 2024 by Mist and Cal, and that after joining Y Combinator’s Winter 2025 batch it became one of the most profitable companies in the sector, with cumulative revenue above $390 million. The investigation, he said, was conducted independently after he was asked to review allegations of internal misconduct.
Screenshots, spreadsheets, and recordings form the core evidence
The timeline in the report includes an internal dashboard screenshot shared by Broox in April 2025 that allegedly displayed trader “Jerry’s” private wallet address. In August 2025, he allegedly shared another screenshot showing trader “Monix’s” registration details and several wallets linked to that account. The report says Broox also discussed using data obtained from internal systems to analyze holdings and trading patterns, then position trades in advance for himself or others.
ZachXBT also describes a Google spreadsheet created by a small group that matched wallet addresses to targeted KOLs. According to the report, several of the wallets listed in the spreadsheet or shown in leaked screenshots were independently confirmed by the people identified, who said the addresses did belong to them or were directly tied to them.
KOL wallet tracking and other Axiom staff named in the recordings
One of the named targets was trader Marcell. The report says he drew attention because he would allegedly buy meme coins early through private wallets and later promote those tokens on X and Telegram. That pattern, as described in the investigation, made his wallets useful targets for monitoring.
Another person heard in the call was Gowno, identified as Seb, a recently hired moderator at Axiom. In the same recording, Broox allegedly said that another Axiom BD employee, Ryan, known as Ryucio, had looked up user information for others through the internal dashboard. The report says the resulting data was then used to analyze wallet activity from selected traders and KOLs and shape profitable trading plans.
Axiom says access has been revoked and the matter is under review
ZachXBT says that in a recording from February 2026, Broox outlined a plan to use his access at Axiom to help Gowno make $200,000 quickly. The report also identifies a wallet it says belongs to Broox and states that, after reviewing related addresses with heavy meme coin activity, it found several representative trades that fit a suspected insider pattern.
In its response, Axiom said it was shocked and deeply regretful to learn that internal customer support tools had been misused to query user wallets. The company said it has revoked access to the tool and will continue investigating to ensure anyone responsible is held accountable. Axiom added that the conduct does not reflect the team’s values and that updates will be posted on Twitter (X).