Inside Axiom Insider Trading Allegations

A senior Axiom employee allegedly accessed sensitive user data, shared private wallet screenshots, and targeted trading tactics.

ZachXBT alleged that an Axiom Exchange employee abused internal access to sensitive user data.

In a series of posts, a prominent crypto investigator identified the employee as Brooks Bauer and said that he used tools inside Axiom to look at private wallet information and track user activities for trading purposes since early 2025.

Internal Tools Exploited

Axiom was founded in 2024 by Mist and Cal and later participated in Y Combinator’s Winter batch 2025. ZachXBT said that the platform quickly became one of the most profitable companies in the crypto sector, and made more than 390 million dollars to date. He revealed that he was retained to independently investigate allegations of misconduct in the company after receiving reports.

According to investigators, Brooks worked as a senior business development employee at New York-based Axiom. In clips recorded on a private party call, Brooks allegedly said he could track any Axiom user through referral codes, wallet addresses, or user IDs, and said he could “find anything about that person.”

In the same recording, Brooks allegedly explained that he first searched 10 to 20 wallets and gradually increased that number to avoid suspicion. ZachXBT said Brooks also set rules for how others can request user verification and said he would post a full list of wallets.

The investigator also said that in April 2025, Brooks shared a screenshot from Axiom’s internal dashboard showing the private wallets of a trader identified as “Jerry.” In August 2025, Brooks allegedly shared another image showing the registration information and connected wallets of a merchant named “Monix.” That same month, he reportedly discussed looking at Axiom users who had traded in the meme coin AURA.

According to ZachXBT, team members created a Google Sheet that included key opinion leader (KOL) target wallet addresses. The sheet allegedly mapped wallet data obtained from Axiom’s internal dashboard by Brooks. Several KOLs mentioned in the document or shown in the leaked screenshots were contacted and independently verified that the wallet details mentioned in them were accurate, added an on-chain sleuth.

You may also like:

One of the targeted traders has been identified as Marcell, who is described as a KOL known for buying large chunks of meme token assets from private wallets before promoting them to followers. ZachXBT said such traders are considered prime targets because private wallet addresses are rarely public and reuse of addresses is rare, increasing the amount of privileged information.

ZachXBT revealed that Brooks’ wallet was identified through private chat messages and that the associated addresses were mapped. However, he said that due to the high volume of meme coin sales, it was difficult to isolate specific examples of high confidence insider trading without accessing Axiom’s internal log to review the trading time. Funds from related addresses are said to have flowed primarily to several exchange deposit addresses.

The investigator also alleged that Brooks discussed plans during a February 2026 recorded phone call to help Axiom’s newly hired president, identified as Gowno (Seb), quickly profit $200,000 by misusing access to internal tools. ZachXBT demanded that Brooks share screenshots of the exchange balance in private chats to show that the transaction is already generating returns.

ZachXBT added that because Brooks is based in New York City, this story may fall under the Southern New York district.

On-Chain Crime Investigations

From linking “Lick” to wallets tied to more than $90 million in alleged thefts and funds related to US government seizures, to exposing the $5-10 billion “Black U” market in Tron allegedly linked to the Lazarus Group, ZachXBT has built a reputation for tracking major crypto crime networks.

He detailed how assets stolen from platform hacks like Bybit were channeled through illegal channels, and separately exposed a Canadian scam accused of stealing more than $2 million using Coinbase’s impersonation programs.