Axiom employees are accused of exploiting insider access to track market movers
ZachXBT alleged that Axiom employees were exploiting internal tools to track private user wallets for unfair trading benefits.
A blockchain investigator released findings today in a series of posts naming Brooks Bauer, a New York-based senior business development executive at the exchange, as a key figure in the alleged scheme.
1/ Meeting @WheresBroox (Brooks Bauer), one of many @AxiomExchange employees are suspected of abusing the lack of access controls of internal tools to view sensitive user information in internal transactions by tracking private wallet activity from early 2025. pic.twitter.com/KwICQMJL1q
— ZachXBT (@zachxbt) February 26, 2026
According to the investigation, Brooks allegedly used internal audit tools to map private wallets connected to high-value and powerful traders and monitor token collections in advance. The information was reportedly shared within a private group that wanted to mirror or pre-trade before public promotion, the results claim.
“The thing is how this really works is that if you have a wallet or a ref code or a user ID, any of those three, I can find anything associated with that person. In the event of an accident, I will have all their wallets,” according to one of the recorded calls obtained during the investigation, where Brooks explained his ability to monitor the trading patterns of selected users and see movements that could indicate future market activities. “I’ll have time and dates. I can even see who’s following him and who they’re named. I can probably research about 10 to 20 wallets each day. And then over time, I’ll expand a little bit.”
The investigation alleges that Brooks improperly accessed and shared sensitive user data from Axiom’s internal dashboard multiple times in 2025.
In April, he reportedly circulated a screenshot showing private wallets linked to a trader identified as “Jerry.”
In August, he allegedly shared another image that revealed registration details and wallet addresses linked to a trader known as “Monix.” That same month, he reportedly discussed looking at people trading the meme coin AURA.
According to these findings, team members compiled Google Sheet wallet addresses associated with several influencer targets. Several people named in the leaked material later independently confirmed that they owned the fund addresses listed in the document.
The findings also mean Brooks’ wallet was identified through private chat messages, with associated addresses recorded later.
However, ZachXBT noted that due to the large volume of meme creation, authenticating insider trading may require access to internal exchange logs.
One recorded call reviewed in the investigation reportedly showed Brooks and Axiom’s newly hired president, “Gowno,” discussing insider-viewing capabilities. In the February 2026 call, Brooks allegedly suggested that insider access be used Help generating more profit.
Founded in 2024 by Henry Zhang and Preston Ellis, Axiom quickly emerged as a leader in the DeFi space in Solana. blockchain, funded by Y Combinator support.
By the end of 2025, the platform became the third most profitable in DeFi, allowing for fast trading across multiple chains and gaining a large volume of users in between the growing popularity of meme coins.
In response to ZachXBT’s report, Axiom said it was “shocked and disappointed” to learn that a member of its team had misused internal customer support tools to access a user’s wallet information.
An internal investigation has been launched, and access to the devices in question has been removed, the team said.
We are shocked and disappointed to learn that someone on our team has misused internal customer support tools to track users’ wallets.
We have removed access to these tools and will continue to investigate and prosecute potential cases.
This does not represent us as…
– Axiom (@AxiomExchange) February 26, 2026
