The ongoing investigation into the identity of the individual or group known as 'Cyberleek,' who has been leaking gameplay footage of the upcoming Grand Theft Auto 6 since August 18, appears to be nearing a significant breakthrough. Cybersleuths have identified a Discord user named "stayonthegrindd" as a primary suspect, presenting a timeline of digital forensic evidence that suggests a strong connection.
The investigation, spearheaded by GTA Forums user Vice Cit, began to focus on "stayonthegrindd" following a Reddit post that detailed the user's potential involvement. Though the original Reddit thread was deleted, the information was preserved and analyzed by Vice Cit. This analysis, combined with "Cyberleek's" blockchain activity, has reportedly yielded "damning evidence."
According to Vice Cit's report, a critical sequence of events unfolded around August 16 and 17. "Cyberleek" is believed to have shared a sneak peek of the GTA 6 map on August 16, followed by the infamous basketball gameplay clip being uploaded to the dark web the next day. On the morning of August 18, a user named "Cyberleeker" on the dark web forum Dread shared this basketball footage across various hosting sites.
Approximately eight hours later, the Discord user "stayonthegrindd" joined a GTA 6 Discord server. Shortly thereafter, the user posted, then deleted, the same basketball gameplay clip. "stayonthegrindd" claimed the footage was from 2026 and asked other server members what leaked gameplay they wished to see next, promising "driving gameplay" while a video was allegedly compressing. The user also stated they could quickly share the full map in the interim. About 90 minutes later, the leaked map was uploaded to the blockchain. Two hours after that, "Cyberleek" uploaded the first GTA 6 leak video, showing Jason driving, to the blockchain.
Further contributing to the suspicion, a Discord user later claimed on August 18 to have received a direct message from "stayonthegrindd" containing a clip of a black car, which was deleted before it could be fully viewed. This clip is believed to be the "Gas" gameplay footage that later surfaced publicly on August 23 without being uploaded to the blockchain.
Vice Cit posits that while it's possible "stayonthegrindd" simply found and shared the basketball leak, the detailed timeline strongly implies a connection to "Cyberleek." "This person either had this material and was trying to get this whole thing to blow up by posting it in a place they knew would spread the leaks like wildfire," Vice Cit speculated, "or this person is a friend of the person who has this leaked material and was able to see the leaks before they ever got uploaded onto Arweave."
This analysis suggests that "stayonthegrindd" possesses knowledge of and access to leaked GTA 6 content before it is officially disseminated by "Cyberleek." The close timing between "stayonthegrindd's" Discord activity and "Cyberleek's" blockchain uploads is considered too coincidental to disregard. It is anticipated that Take-Two Interactive and relevant authorities are aware of this development and are likely investigating the Discord user.