Critical Assessment
The on-chain forensic evidence presented in this report is irrefutable and permanently recorded on the Solana blockchain. Every transaction, every wallet address, and every token movement referenced herein can be independently verified by any party. No passwords, private keys, or special access is required.
1. The victim (@Vision33X) made legitimate, verified investments in MPOX tokens through Jupiter Exchange DCA orders and OTC transactions. On-chain purchases are permanently recorded with full transaction signatures.
2. All tokens were subsequently stolen through unauthorized wallet drain attacks using a malicious smart contract. The stolen assets were split across multiple wallets and rapidly liquidated.
3. The MPOX token itself is a coordinated pump-and-dump scheme. 66% of the total supply sits in a single anonymous wallet. The developer has deployed 11 separate tokens. The token has crashed 97.4% from its peak.
4. Named individuals — Christian Liam Barker, Alen M. Bachkhaz, and David D. Chaboki — have been identified. The victim had direct, repeated phone conversations with Barker and Bachkhaz, who actively solicited investment, promised returns and repayment, and applied sustained pressure to increase the investment amount.
This is not an isolated incident. These individuals are connected to over $80 million in documented victim losses across multiple token scams spanning several years. The theft from @Vision33X is one piece of a much larger organized criminal operation.
This report has been forwarded to legal counsel. Aggressive legal action is being pursued.
How The Victim Was Targeted
The following account is based on the victim's documented testimony, phone records, and corroborating on-chain evidence. The blockchain transactions independently confirm the investment timeline described below.
The Initial Approach
Christian Liam Barker, Alen M. Bachkhaz ("Books"), and their associates directly approached @Vision33X about investing in the MPOX token project. Over the course of multiple phone calls, they solicited the victim's participation as an investor, promising returns on investment and repayment of capital.
The victim was relatively new to cryptocurrency at the time and did not know the true backgrounds of these individuals — their criminal records, their history of rug pulls, or their pattern of defrauding investors across multiple projects.
The Investment
After sustained pressure through numerous phone calls, the victim agreed to invest. The victim made clear: "I am not involved in your project. I will support it, but I want my money back." This was understood by all parties as an investment with an expectation of return — not a donation, not a purchase with no strings attached.
The victim invested approximately $350,000 through DCA and OTC transactions. The on-chain DCA purchases executed through Jupiter Exchange and Raydium are permanently recorded on the Solana blockchain and documented below. The OTC transactions are corroborated by phone records and communications.
The $1,000,000 Pressure Campaign
After securing the initial investment, the same individuals came back to the victim and attempted to solicit an additional $1,000,000 — framing it as a loan opportunity. Over multiple phone calls, they applied aggressive pressure tactics:
• Claimed they had "tons of investors" already committed
• Told the victim "you don't want to miss out"
• Claimed they themselves were investing $1,000,000
• Called repeatedly, pushing hard for a commitment
The victim declined the $1,000,000 request but agreed to an additional $300,000 investment. The victim drew up a formal investment document through a verified company to protect the transaction.
The Document That Exposed Them
When the individuals saw the legitimate, professionally prepared investment document, their demeanor changed immediately. They became visibly upset, refused to sign or acknowledge the document, and abruptly hung up the phone.
This reaction is telling. Legitimate business operators welcome formal documentation. Only individuals who intend to defraud investors react with hostility when asked to put terms in writing.
The Silence and the Block
Following this incident, the victim repeatedly reached out asking about the status of the investment and when repayment would occur. These requests were ignored. After sustained attempts to recover the invested funds, the victim was blocked entirely.
No repayment was ever made. No accounting was ever provided. The investment was taken, the promises were broken, and the individuals disappeared — only to resurface running new scams under new project names.
Victim Wallet Information
WALLET 1 — Phantom (Primary)
Address: 74v3sV1jcXmz6fKHyRUfL4MhnAbuX8RZcwmgBQLNM6WK
Platform: Phantom Wallet (Solana)
SOL Balance: 0.01458 SOL (~$2.60)
MPOX Balance: 0 — COMPLETELY DRAINED
WALLET 2 — SOL Flare (Connected to Jupiter for DCA)
Address: 5WUk8rSTmvU8QwPVZ5tJ3Cc69ZEJB7PBjjjd9HsoibHf
Platform: SOL Flare (connected to Jupiter Exchange)
SOL Balance: 0.194808 SOL (~$25)
MPOX Balance: 0 — COMPLETELY DRAINED
The Token — Monkey Pox (POX / MPOX)
Mint Address: mpoxP5wyoR3eRW8L9bZjGPFtCsmX8WcqU5BHxFW1xkn
Blockchain: Solana
Total Supply: ~999,941,559 MPOX
Creator Wallet: C42vBQa99xb6JRuaqMph2Gn9XDUzx8dvJcsxsq3fibiu
Creator History: 11 tokens deployed — serial deployer
All-Time High: $0.0829 (October 15, 2024)
Current Price: $0.00217 — DOWN 97.4%
24h Volume: $93.84 — effectively dead
Top Holder: 66% of entire supply in one wallet
Metadata: MUTABLE — can be changed at any time
Verified On-Chain Investments — Undisputable Blockchain Evidence
The following transactions are permanently and immutably recorded on the Solana blockchain. They were verified by blockchain security professionals and serve as undisputable proof that the victim participated in legitimate investments through recognized exchange channels.
Phantom Wallet — Jupiter DCA Investments (September 13, 2024)
11:29 UTC
DCA execution (SOL to MPOX via Raydium) — ~510,224 MPOX
11:59 UTC
DCA execution — ~537,626 MPOX
15:22 UTC
Manual swap on Raydium — ~915,911 MPOX
15:30 UTC
DCA fill + partial close — ~941,310 MPOX
18:30 UTC
DCA close — final delivery — 1,293,569 MPOX
SOL Flare Wallet — Jupiter DCA Investment (October 1, 2024)
SOL Invested: 67 SOL
MPOX Received: 141,385.93 MPOX
Router: Jupiter Exchange / Raydium
TX Signature: 3wsghw3ET9noDPzEHKZJthgSnmxfV3qr7djh6MycWWFXsdA8BXWwL4UjekTXkbZzzsuzzBgUYJWbycWh4sUVpKGY
Total MPOX held after all on-chain DCA investments: approximately 2,553,400 MPOX across both wallets. Additional OTC investments were made outside of on-chain channels.
The Theft — Both Wallets Drained
SOL Flare Wallet Drain — November 1, 2024
Tokens Stolen: 1,269,830.658863792 MPOX (100%)
Destination: 5VCyrWGp5VoZipFiqRP2mMAkRnLQKaMoyLgoPC934pP8
Method: TransferChecked — compromised key
TX Signature: 47z4Qhfe7oUAjV75wacRSF8SBaHbnXdJV9JyzAgwfx5YuyYCCKsnUDutCaeqS7n8cuZos3oY1pSv4cgVFa317G7S
The tokens made a round trip. Phantom to SOL Flare. Stolen from SOL Flare. Routed through an intermediary. Landed back in the Phantom token account. Then Phantom itself was drained. This is a coordinated, multi-step operation — not opportunistic theft.
Phantom Wallet Drain — September 16, 2025
Three transactions executed within 11 seconds — consistent with an automated drainer script:
TRANSACTION 1 (11:14:34 UTC) — Created staging accounts via malicious contract
56UaXRr81CjB33nnedAnViNEr18ngF5MvjSNMTMED1VG9JK2etoxnrQzDZEeTjwECDeVhFa7rpyFtRb2pk75iWKz
TRANSACTION 2 (11:14:40 UTC) — Moved 1,283,569 MPOX + 2,100 BCNT to staging
3EvzyrA1VQ7iqxuJCw7WPTKp4uHsb2nxz8fdh46nGVjLMC4BhEkKk1naTeYzkrLNNZdyPB5zahsMpiNx64n8bQMh
TRANSACTION 3 (11:14:45 UTC) — All MPOX drained and split
4iEMazLie7oyn3YCV4G8kxdopY6E1WRzRwQRpQnYbSrrugZzUXuwaShEfypyLmzBV3YKGN66pWU1s4vTLE97B5bF
WHERE THE STOLEN TOKENS WENT
8rTKpBYab4ukYeRN3JUYjrwY76Sz7mqh2U3TfDeXXZ7S
Received 320,892 MPOX — Sold on Raydium 16 MINUTES LATER for ~6.6 SOL
6tXyXncwcB1PZjA4YyZpyRfhovUWTRb2mB5TETGsxckL
Received 962,677 MPOX — Forwarded to hop wallet within 1.5 hours
Identified Perpetrator Wallets
PRIMARY DRAINER
5VCyrWGp5VoZipFiqRP2mMAkRnLQKaMoyLgoPC934pP8
Active as of January 2026 — 20+ transactions
SOL COLLECTION WALLET
45ruCyfdRkWpRNGEqWzjCiXRHkZs8WXCLQ67Pnpye7Hp
Currently holds 20.85 SOL — theft proceeds
MALICIOUS SMART CONTRACT
A1fH3EbzadiMfc9qNLuqysj3uh7KBtyXXikk2E4Twg8n
Still deployed; upgradeable; not a known protocol
BARKER ETH WALLET
0x2579c7535c3d240623d11133bab77ebc5806671e (barkmeta.eth)
737 transactions
MPOX TOKEN CREATOR
C42vBQa99xb6JRuaqMph2Gn9XDUzx8dvJcsxsq3fibiu
Deployed 11 tokens; update authority still active
Estimated Financial Losses
| Total MPOX Stolen (on-chain) | ~2,553,400 MPOX |
| Total Investment (DCA + OTC) | ~$350,000 |
| Value at All-Time High | ~$211,700 |
| Value at First Drain (Nov 2024) | ~$5,100 |
| Value at Second Drain (Sep 2025) | ~$2,567 |
| Recovered from Sales | ~$100 |
| BCNT Also Stolen | 2,100 BCNT |
| Repayment Received | $0 |
Why MPOX Is a Fraud — 10 Red Flags
One wallet holds 66% of the entire token supply. Address CH7h8FhHddxNt7jdd2AuBT17EUqFwDaFfS7a4fZJKNoo holds ~660 million of ~1 billion tokens. Top 10 wallets control 79.34%.
Top holders did not buy on-chain after launch. RugCheck confirms the largest holders received tokens through pre-arranged allocation. Insiders were loaded before retail investors had a chance.
Serial token deployer — 11 tokens from the same wallet. Known scam factory pattern: launch, pump, dump, repeat.
RugCheck detected 6 insider networks holding 8.28 trillion tokens. Coordinated insider activity far beyond visible holder list.
Anonymous team with zero accountability. Website states: "No update, feature, utility, or continued development is promised."
Mutable metadata. Update authority active. Token name, symbol, image can be changed without notice.
97.4% price collapse. From $0.0829 ATH to $0.00217. From $92M market cap to $2.17M. Daily volume: $93.
LP burn was strategic cover. 99.97% burned, marketed as "safe." The 66% whale dumped through the pool instead.
Exploited a public health crisis. Timed to WHO Mpox emergency declaration. MonkeyPoxInu (2022) devs vanished with $400M.
Multiple independent sources confirm scam. CryptoManiaks, 99Bitcoins, Crypto.news, RugCheck all flagged it.
The People Who Did This
These are not anonymous actors. They have names, faces, and public histories. The victim had direct, repeated phone conversations with these individuals, who actively solicited investment, made promises of repayment, and then disappeared with the funds. The blockchain does not lie.
CHRISTIAN LIAM BARKER
"Barkmeta" — The Architect
Aliases:@barkmeta, @tall_data
Location:Los Angeles, CA (prev. Plain City, OH)
ETH Wallet:0x2579c7535c3d240623d11133bab77ebc5806671e
Businesses:Bark Media, Doginal Dogs, Crypto Spaces Network — NONE registered
- Identified by on-chain analyst Blade as mastermind behind the original POX token rug pull (2022). Leaked recordings captured crew discussing operations.
- Connected to alleged $17M purchase of Kanye West's X account (Feb 2025). Promoted "Yeezy Coin" — rug pulled within hours. Kanye denied: "This is not real. I don't know this person."
- Connected to DeFiApes NFT rug pull (2023) — raised 22,000 ETH (~$40M+). Team abandoned project. Only 122 holders remain of 10,000 NFTs.
- Co-founded Doginal Dogs with Chaboki — OKX, Binance, and Magic Eden reportedly stopped supporting it.
- Charges clients $30K-$100K+ through "Launchpad" program with no registered entity.
- Purchased $998,000 property in Plain City, OH in Dec 2021 — at age 24, with no registered business income.
- No LLC. No Corp. No DBA. Not registered in any state.
ALEN M. BACHKHAZ
"Books" / "Booksey" — The Grifter
Location:Wayne, NJ
Business:The Book Sweepers (sports betting) — No NJ registration found
- Directly solicited and pressured the victim into investing ~$350,000 through DCA and OTC. Made repeated phone calls promising returns. When presented with a formal investment document, became hostile and hung up. Subsequently blocked the victim entirely.
- Committed documented federal PPP loan fraud. Received $20,833 — the exact maximum for a sole proprietor — claiming to be a "Drywall and Insulation Contractor." Actual business: sports betting. No drywall registration exists in NJ. (Source: SBA.com)
- Co-ran $COPE/$POGE presale scam with Shillin Villain. Controlled 95% of supply, drained ~$150,000. Called it a "social experiment." (Source: Bitget News)
- Trustpilot reviews describe business as "based on threats and lies." Threatens customers' employers and families.
- Currently hosting public Twitter Spaces while victims pursue legal action.
- No registered business. No LLC. No Corp. No DBA anywhere.
DAVID D. CHABOKI
"Shibo" / "GodsBurnt" — The Enforcer
Aliases:@GodsBurnt
Location:Glenview, IL
Businesses:Bark Media, Doginal Dogs, CyscoExpert/CXP Corp
- Violent criminal record — Cook County, IL public record. Robbery and battery (Dec 2014). Aggravated battery with deadly weapon — beat a victim with a brick and fists, hit the victim with a car. Told victim: "You're lucky we didn't kill you." Served 15 weeks Cook County Jail. 11 total court records.
- Co-founded Bark Media and Doginal Dogs with Barker.
- This is the person investors are asked to trust with their cryptocurrency.
How All Three Are Linked
Shillin Villain (Alex / @ShiLLin_ViLLian) is the proven bridge. He co-launched DeFiApes ($40M+ rug pull) WITH Barker. He co-ran $COPE/$POGE ($150K+ scam) WITH Bachkhaz. All three co-host Twitter Spaces together. All three paid for 20+ reputation-laundering press releases claiming a "record free from scandals" — innocent people don't spend $15,000+ to bury their criminal records.
POX (2022) → DeFiApes (2023) → $COPE/$POGE (2024)
→ Kanye/Yeezy Coin (2025) → Doginal Dogs (ongoing)
Same crew. Same playbook. New victims every time.
Evidence & Verification Links
All evidence is permanent, public, and independently verifiable. Look it up yourself.
Victim Wallets (@Vision33X)
Key Transactions
Perpetrator Wallets
Token Analysis
Independent Reporting
- AinvestKanye account / Barkmeta crypto scam fears
- BeInCryptoKanye West / Barkmeta meme coin controversy
- Altcoin BuzzKanye's X account sold for $17M / Barkmeta scam
- Bitget News$COPE/$POGE presale manipulation
- CryptoManiaks"Is POX a Scam?"
- Patch.comChaboki arrest / Glenview police report
- SBA.comBachkhaz PPP loan record
- ZachXBTJeffrey Huang / Machi investigation
Legal Action In Progress
This report and all supporting evidence has been forwarded to legal counsel. This investigation has been ongoing for over two years.
• Federal complaints filed with FBI IC3, SEC, and FTC
• Civil RICO action being prepared — pattern of racketeering across state lines
• Civil action against Barker, Bachkhaz, and Chaboki
• SBA OIG referral for Bachkhaz PPP loan fraud
• Emergency TRO and asset freeze being pursued
• Blockchain forensics firm engagement (Chainalysis / TRM Labs)
• All communications preserved for legal proceedings
• Malicious smart contract reported to Solana Foundation
A Message to the Community
If you have dealt with Christian Barker (@barkmeta), Alen Bachkhaz ("Books"), or David Chaboki (@GodsBurnt) — check your wallets. Check your transactions. You may be a victim and not even know it yet.
If you have information, DMs are open:
@Vision33X
The blockchain does not forget. The blockchain does not lie.
This is not going away.
Investigation Methodology
This investigation was conducted by a third-party blockchain security consultant using on-chain transaction analysis via Solana RPC nodes and public block explorers, Ethereum wallet analysis via Etherscan, token security analysis via RugCheck.xyz and DEXScreener, open-source intelligence across crypto news outlets, public court records (Cook County, IL), public federal loan records (SBA.gov), and wallet tracing from victim wallets through intermediary and drainer wallets to final collection points.
All findings are based on publicly available blockchain data, public records, and open-source reporting. No unauthorized access to any system was performed or required. Everything in this report can be independently verified by anyone.