Federal agents just cracked a $220,000 cryptocurrency heist hiding in plain sight on the world’s largest PC gaming storefront. And they did it by following a trail of late-night fast food orders.
A multi-year FBI investigation culminated this week in the arrest of a Florida college student accused of slipping wallet-draining malware into eight video games distributed on Valve’s Steam platform.
The scheme breached roughly 80 cryptocurrency wallets and infected 8,000 user devices between May 2024 and early 2026. On July 14, agents arrested 21-year-old Zyaire Dontaevious Zamarion Wilkins at his North Lauderdale home. Wilkins, a student at the University of West Florida, allegedly operated under the encrypted Signal alias “Sibel.eth.” He faces up to 10 years in federal prison.
Investigators tracked the stolen Bitcoin directly to Bitrefill, an online service where the suspects purchased more than 150 digital gift cards. Most of those cards were spent on Uber Eats. A federal subpoena sent to Uber subsequently matched the food delivery locations to Wilkins’ residential and university addresses.
Trojan Horses on Steam
The group bypassed Steam’s internal vetting process using a remarkably simple bait-and-switch. They uploaded clean builds of the games using stolen U.S. citizen identities to pass initial storefront checks. Once approved, the developers pushed malicious updates to the storefront.
The software-mediated wallet risks proved catastrophic for targeted users. Wilkins allegedly paid $10,000 for a remote access trojan, collaborating with an unnamed Seattle-based developer known in court documents as “Subject #1”.
They actively marketed titles like PirateFi and BlockBlasters across Discord, Telegram, and X using automated bots. The bot campaigns specifically hunted individuals boasting about large cryptocurrency portfolios online.
The FBI confirmed the 8,000 infected users downloaded titles including Lunara, Lampy, Dashverse, Chemia, DashFPS, and Tokenova.
What Valve’s Blind Spot Means for PC Gaming
This breach exposes a critical flaw in how digital storefronts handle post-launch patches. Valve heavily scrutinizes initial game submissions. But the platform historically lacks comprehensive secondary security reviews for routine updates.
That discrepancy allowed Wilkins and his partner to inject the payload long after the storefront algorithms stamped the games as safe. The FBI is currently searching for remaining victims who downloaded the eight specified titles to determine the final scope of the unauthorized wallet drains.