Sourced reads / no payloads
We read the leak coverage so you can read the evidence, not the hype.
The Cyberleek story is moving through gaming desks, legal filings and crypto chatter at different speeds. This column compresses those articles into the claims they actually support, with every source left visible.
Updated Oct 09, 2026
14 dispatches
Images are editorial reference art, never leaked material
Editorial ruleWe do not mirror leaked clips, map files or wallet links. The cards below summarize public reporting and link to the original articles so readers can check the wording and context themselves.
DISPATCH 14 / OCTOBER RETURN
A long upload restarted the campaign, and the dev menu is the real finding.
Outlets reported on October 8 that a roughly 24 to 25 minute video titled “GTA 6: An Extended Leek” had appeared under the Cyberleek name, distributed as a file download rather than a stream. Eurogamer said it viewed the footage and that it appears to be legitimate. Reporting describes missions, races, shops, first-person driving, character nudity and a vehicle spawned from nothing — a debug capability that points at a development environment and undercuts the idea that viewers are seeing the shipping game. No outlet reports authentication from Rockstar, and Take-Two did not respond to a request for comment.
Sources / Eurogamer + PCMag, Oct 8, 2026
READ THE FIRST-HAND REPORT -> READ PCMAG -> DESK BRIEFING ->
DISPATCH 13 / FEE MECHANISM
The exit was funded by trading fees, and the totals do not agree.
Later on-chain work reframes the August withdrawal: proceeds are described as coming from trading-volume and liquidity fees rather than from selling the creator's original allocation, and roughly 270 million tokens were reportedly burned. That makes “rug pull” a characterisation rather than a finding. It also leaves the headline number genuinely unsettled — published readings range from about $200,000 to $350,000, two of them appear to measure the same on-chain quantity, and at least one breakdown contradicts its own components. Lead with the range.
Sources / CoinDesk, Aug 27 + Protos, Oct 8, 2026
READ COINDESK -> READ PROTOS ->
DISPATCH 12 / TOKEN EXIT
The financial incentive is now visible on-chain.
CoinDesk reports that the token creator claimed roughly $146,000 in wrapped SOL and sold 15.4 million accumulated creator-fee tokens for about $125,000 in SOL. That supports a large campaign-linked cash-out. It does not identify the legal operator or replace a court finding.
Source / CoinDesk, Aug 27, 2026
READ ON-CHAIN REPORT ->
DISPATCH 11 / STORY ESCALATION
Lucia's prologue changed the scope of the leak.
PC Gamer describes a 4-minute-38-second clip of early Lucia story material, the first Cyberleek release centered on the co-lead. It is evidence of access beyond the earlier free-roam scenes, but still not proof that the public holds the complete game.
Source / PC Gamer, Aug 26, 2026
READ SPOILER-LIGHT REPORT ->
DISPATCH 10 / OFFICIAL BASELINE
The Extended Look is the new control sample.
Rockstar's August 27 page describes the video as captured entirely from in-game footage on PlayStation 5. That matters because it gives readers a non-anonymous reference for character models, world detail and capture style. It does not validate Cyberleek's source, map claims or full-build story.
Source / Rockstar Games, Aug 27, 2026
READ OFFICIAL EXTENDED LOOK ->
DISPATCH 01 / CLIP FORENSICS
The “boring” footage is doing the persuading.
PC Gamer’s first report describes two ordinary scenes: Jason at an oceanside house, a basketball interaction with a Focus increase, and a separate driving encounter. The important point is not that mundane footage cannot be faked; it is that interactive, unglamorous moments create a stronger authenticity question than a polished fan trailer.
Source / PC Gamer, Aug 18, 2026
READ ORIGINAL REPORT ->
DISPATCH 02 / MAP CLAIM
A map image can be a clue without being a map.
Coverage from TechRadar and other gaming desks says Cyberleek circulated an image presented as Leonida’s full map. That image may help compare geography and scale, but the public record does not establish provenance, build date or whether the file was stitched. “Full map” remains a label attached by the uploader, not a verified fact.
Source / TechRadar, Aug 20, 2026
READ ORIGINAL REPORT ->
DISPATCH 03 / LEGAL ESCALATION
The subpoena story is about metadata, not a named suspect.
Tom’s Hardware reports that Take-Two sought Microsoft and Discord records connected to the Cyberleek investigation, including account and device information. Axios frames the wider incident as a business shock. Both angles matter, but neither turns a filing into a verdict or reveals a verified operator.
Sources / Tom’s Hardware + Axios, Aug 21, 2026
READ TOM’S HARDWARE -> READ AXIOS ->
DISPATCH 04 / INCENTIVES
The manifesto and the token pitch can both be real.
Several reports describe a protest message about physical game discs appearing beside crypto promotion and paid custom-footage offers. That combination does not tell us the creator’s primary motive. It does tell readers to treat every new “proof” as part of a campaign with an obvious attention and money incentive.
Source / BPI News, Aug 22, 2026
READ ORIGINAL REPORT ->
DISPATCH 05 / AUTHENTICITY CHECK
“Apparently genuine” is the responsible headline.
PC Gamer’s follow-up coverage notes that takedowns are flying and that AI-generated fakes are appearing alongside credible-looking clips. Rights-holder action is a meaningful signal, but it cannot certify every repost, the claimed source or a complete playable build. Keep those three questions separate.
Source / PC Gamer, Aug 20, 2026
READ ORIGINAL REPORT ->
DISPATCH 06 / DEVICE TRAIL
The legal request reaches past the alias.
Newer reporting on the August 20 petitions says the Microsoft request includes account, login, device and OneDrive records, while the Discord request focuses on records tied to named Cyberleek accounts and servers. That widens the identification effort, but it still does not publish a verified name.
Sources / Windows Central + Tom’s Hardware, Aug 21-22, 2026
READ WINDOWS CENTRAL -> READ TOM’S HARDWARE ->
DISPATCH 07 / SERVICE STATUS
The subpoena is approved, but the platform step is still open.
PC Gamer reports Discord had not been served with Take-Two's subpoena as of August 25 and would assess its validity and scope before responding. That procedural update matters: an approved request is not the same as records produced, and neither step names the Cyberleek operator.
Source / PC Gamer, Aug 25, 2026
READ PROCEDURE UPDATE ->
DISPATCH 08 / SCAM WATCH
Fake replay pages are now part of the leak cycle.
Malwarebytes reports finding fake GTA 6 Extended Look and demo sites that lead visitors toward password-stealing malware. Now that the official video is live, urgent “watch now” and “full replay” pages are even easier to spoof. Use Rockstar's page or verified platform listings instead of a mirror.
Source / Malwarebytes, Aug 25, 2026
READ SECURITY REPORT ->
DISPATCH 09 / PLATFORM EXPANSION
Take-Two's identity search now reaches X and YouTube.
TorrentFreak reports two additional DMCA applications aimed at X Corp. and Google/YouTube. The reported X request names three accounts and the Google request names one video and three channels. The report says no user data has changed hands, and some named accounts may be impostors.
Source / TorrentFreak, Aug 26, 2026
READ THE FILING REPORT ->
How to use this column
Start with the original source link, then return to our GTA 6 leaks master file for the evidence grade, or the latest status ledger for the current checkpoint. The discussion room is for challenging the interpretation, not reposting files.