According to @zachxbt, the threat actor John (Lick) displayed control of a wallet holding about USD 23M that he ties directly to suspected crypto thefts exceeding USD 90M from the US Government in 2024 and to other unidentified victims from November 2025 to December 2025. Source: ZachXBT on X. The thread identifies a specific on chain wallet and timeframe, giving traders concrete parameters for watchlists, address labeling, and real time wallet tracking. Source: ZachXBT on X. Participants can reference the wallet and details in the thread to set alerts and enhance deposit controls around flows associated with the alias John (Lick). Source: ZachXBT on X.