Investigation • May 11, 2026

Cache Out: The Truth Behind the Real-Debrid Rug Pull

Two young Frenchmen built a piracy empire worth millions. Then the film industry came knocking, the French state started burning down every escape route, and they quietly restructured the entire company in 48 hours. Here's what actually happened — and what didn't.

Open-source intelligence report • 50+ sources across 6 French corporate registries, court filings, news outlets, and community-sourced API testing
Chapter I

The Panic

On the morning of May 10, 2026, millions of Stremio and Kodi users woke up to a dead library. Every movie, every show — the same error: "File removed from the service due to copyright infringement." Within hours, Reddit lit up: "Is Real Debrid gone?" "Is it over?" By the next day, community testing would confirm the worst: it wasn't just pirated movies. Music albums. Public-domain films. Content with no scene tags at all. Everything.

The speculation was immediate and breathless. Arrests. A police raid. A court-ordered shutdown. The founders behind bars. Monitoring services logged nearly 2,000 outage reports in 24 hours across the US, Canada, Europe, and Brazil. The truth, as this investigation reveals, is simultaneously less dramatic and far more interesting: no one was arrested, nothing was seized, and the service is technically still online. What happened instead was a calculated corporate maneuver executed in the span of 48 hours — a restructuring so deliberate it suggests the founders saw exactly what was coming and had months to prepare.

To understand the May 2026 crisis, you have to understand the company behind Real-Debrid, the two men who built it as teenagers, and the staggering amount of money it quietly generated while operating with zero employees and a €7,000 share capital.

* * *
Chapter II

The Company Nobody Sees

Real-Debrid is a trade name. The legal entity is XT Network, a French company registered under SIREN 530 125 319. For most of its 15-year existence, XT Network was a humble SARL — a limited liability company with a share capital of just €7,000. It reported zero employees. Its registered office bounced between provincial obscurity and the Parisian suburbs. If you'd looked at the corporate filings in isolation, you might have mistaken it for a dormant shell.

You would have been very wrong.

Corporate Identity: XT Network

Field Detail
Legal name XT Network SAS (formerly SARL — converted May 7, 2026)
Trade name Real-Debrid
SIREN / SIRET 530 125 319 / 530 125 319 00034
VAT FR53530125319
Incorporated January 3, 2011
Capital €7,000
NAF code 6312Z — Internet portals
Employees 0 (as of 2026)
Auditor ORCOM AUDIT (since 2019); VALEXCO AUDIT (added 2026)
Infrastructure Etix Everywhere (Saint-Herblain), OVH (Roubaix), Datacamp Ltd (London), Fastly Inc (San Francisco)

The Three Addresses

The company's address history reads like a slow-motion escape from the provinces to the capital:

Period Address RCS
Jan 2011 – Jan 2021 39 Rue des Granges Galand, 37550 Saint-Avertin (Tours) Tours
Jan 2021 – Apr 2026 120 Rue Jean Jaurès, 92300 Levallois-Perret (Paris suburb) Nanterre
Apr 27, 2026 – present 86 Rue Voltaire, 93100 Montreuil (Paris east) Bobigny

The last move — from Levallois-Perret to Montreuil, filed on April 27, 2026 — came exactly ten days before the corporate restructuring. That's not a coincidence. That's preparation.

* * *
Chapter III

The Founders

Two men have run Real-Debrid since the beginning. Both were teenagers when they started. Both are now multimillionaires. Neither has a public profile of any significance — no LinkedIn presence tied to XT Network, no conference talks, no press interviews. They are, by design, invisible.

Founder A — A██████ L██████

Born
████ 1990 (age 35)
Address on file
██████████, 44000 Nantes
XT Network tenure
Sole gérant: Feb 2011 – Oct 2011
Co-gérant: Oct 2011 – Jan 2018
Gérant: Jan 2018 – May 2026
Now via HOWLOO as Président
Personal holding
HOWLOO SARL (SIREN 844 766 113)
Online footprint
Instagram @██████████ — "Photographer, Traveller and Life lover"

Founder B — L██████ V██████

Born
████ 1993 (age 32)
Location
Nantes area
XT Network tenure
Co-gérant: Oct 2011 – Jan 2018
Gérant: Jan 2018 – May 2026
Now via DEVIUS as Directeur Général
Personal holding
DEVIUS SARL (SIREN 844 833 517)
Also manages
DATARIUS (SCI — real estate), 2 additional unnamed SCIs, personal consulting entity (SIREN 833 656 606)
Associate
██████████ (shared mandates)

Founder A was 20 years old when he registered XT Network in Saint-Avertin, a quiet commune in the Loire Valley. Founder B was 17 — possibly still a minor — when he joined as co-gérant nine months later. Both appear to have grown up in the Tours area. By the time most people their age were finishing university, they were running one of the most popular services on the piracy internet.

What makes them particularly interesting is how deliberately anonymous they've remained. One maintains a travel photography Instagram with 306 followers. Neither appears on LinkedIn under their real company affiliation. For two men sitting on a combined €16.8 million in cash, their digital footprint is remarkably faint.

* * *
Chapter IV

Follow the Money

XT Network stopped publishing financial accounts after 2014, when it reported €1.2 million in revenue and €53,000 in profit. That was twelve years ago. The company's declared capital is still €7,000. On paper, it looks like a small-time operation. The holding companies tell a radically different story.

In December 2018 — precisely the same month — both founders created personal holding companies. Founder A created HOWLOO. Founder B created DEVIUS. Both were capitalized at €5 million. Both were registered at the founders' home addresses. Both had exactly one purpose: to receive XT Network shares via apport de titres (share transfers), converting direct personal ownership into a tax-efficient holding structure.

The holdings' 2024 financial reports, filed with French commercial courts and visible on Societe.com, reveal the real scale of the Real-Debrid operation:

€8.95M Combined net profit (2024)
€16.8M Combined cash on hand
+28% DEVIUS profit growth YoY

HOWLOO (Founder A)

SIREN
844 766 113
Capital
€5,000,000
Created
December 20, 2018
Address
39 Rue des Granges Galand, Saint-Avertin (XT Network's original address)
Revenue
€0 (pure holding — income is dividends)
Net result 2024
€4,607,000
Cash 2024
€11,607,000
XT Network role
Président (since May 6, 2026)

DEVIUS (Founder B)

SIREN
844 833 517
Capital
€5,000,000
Created
December 18, 2018
Address
██████████, Nantes metro
Revenue
€0 (pure holding — income is dividends)
Net result 2024
€4,345,000 (+28% YoY)
Cash 2024
€5,189,000
XT Network role
Directeur Général (since May 6, 2026)
Real estate
Stakes in SCI Cergy 21, SCI Berkeley 23, King Invest, Park Ouest Invest

Let that sink in. A company with €7,000 in declared capital and zero employees is generating nearly €9 million per year in distributable profit to its two shareholders. Founder B, meanwhile, has been quietly building a real estate portfolio through four property investment vehicles. These are not men who are about to be caught off guard by legal pressure. They've been planning their exit ramps for years.

A company with €7,000 in declared capital and zero employees is generating nearly €9 million per year in distributable profit.
* * *
Chapter V

The 48-Hour Restructuring

Between May 6 and May 7, 2026, XT Network underwent a complete corporate transformation. The sequence was surgical:

April 27, 2026
Registered address moved from Levallois-Perret to Montreuil. New SIRET issued (00034).
April 28, 2026
Updated company statutes drafted and signed by "Pour la société HOWLOO, Monsieur ██████████ — █.█."
May 6, 2026
HOWLOO appointed as Président of XT Network SAS. DEVIUS appointed as Directeur Général. Both personal gérant mandates for the founders dissolved.
May 7, 2026
Legal form conversion: SARL → SAS. A second statutory auditor (VALEXCO AUDIT) added.
May 10, 2026
Massive content filtering escalation — service effectively neutered for piracy use via Stremio/Kodi. Same day: crypto payment processor switched from CommerceCB to CoinGate.
May 11, 2026
Total hash block confirmed — community testing shows 100% block rate on all known hashes regardless of content type. ~2,000 user outage reports filed. No official acknowledgment.

The conversion from SARL to SAS is significant. A SARL exposes its gérants to personal liability; a SAS governed by holding companies adds a layer of corporate indirection. the founders no longer appear as personal directors of XT Network. If the FNEF or any rights-holder pursues legal action, they'd be suing HOWLOO and DEVIUS — not the individuals.

The addition of a second auditor (VALEXCO AUDIT alongside the existing ORCOM AUDIT) is also noteworthy. In French corporate law, a SAS with two auditors is preparing for something — often a sale, a merger, or a complex transaction that requires independent verification. It doesn't prove anything. But it's the kind of thing you do when you're expecting scrutiny.

Key finding

Three days after the restructuring completed, Real-Debrid escalated its content filtering to the most aggressive level in its history. This timing — restructure the liability shield, then break the service for pirates — is almost certainly deliberate. The founders protected themselves first.

* * *
Chapter VI

The Content Purge

What hit users on May 10 was not a takedown, not a raid, not an arrest. It was a software update — an expansion of the infringing_file filtering system that Real-Debrid first deployed in November 2024. But what began as targeted filename filtering escalated, over a matter of hours, into something far more severe: a total block on all known torrent hashes.

Phase one: surgical strikes

The initial wave was precision targeting. Real-Debrid's system checks the actual filenames inside cached torrents — not the magnet display name — against a blocklist of release group signatures and tracker tags. Users across multiple subreddits quickly identified the hard-blocked patterns:

Hard-blocked filename patterns (confirmed by multiple community testers)

Pattern Type Block rate
[rartv] / [rarbg] RARBG tracker tags 100%
-TORRENTGALAXY / -GalaxyTV / [TGx] TorrentGalaxy family 100%
YIFY / YTS YTS releases 100%
-FGT / -LOL / -KILLERS Scene groups 100%
[eztv] / [PublicHD] / [EtHD] Tracker tags 100%
-playWEB / -LAZY / -VARYG P2P / web release groups 100%
torrentday.com / torrenting.com Tracker domain tags 100%

At this stage, torrents without these tags — REMUX releases, anime fansubs, lossless BluRay rips — were still passing through. Source: community analysis on r/debridmediamanager and r/RealDebrid, May 10, 2026.

Phase two: the net widens

Within hours, users who had found "safe" categories began reporting that those too were failing. Anime fansubs went from completely unblocked to nearly entirely blocked. REMUX releases — which have no scene group tags and represent the highest-quality, least "pirate-looking" format — followed the same trajectory. Community testers reported that retesting the exact same hashes just minutes apart produced different results: torrents that passed on first attempt were blocked on the second.

Real-Debrid was rolling out filter updates in real time, expanding the blocklist while users watched.

Phase three: total block

By the end of May 10, the pattern was undeniable. It was no longer filename matching at all — Real-Debrid had transitioned to blocking all known torrent hashes in their cache, regardless of content:

Confirmed blocked — content type irrelevant

Category What users tested Result
Public domain / pre-copyright films Classic cinema from the early 1900s, decades out of copyright Blocked
Music (all formats) FLAC albums, vinyl rips, MP3 collections Blocked
Non-English content Chinese, Russian, and other non-Latin filenames Blocked
No scene tags whatsoever Torrents with no release group, no format info, no identifiable markers Blocked
User's own library Re-adding hashes already present in the user's account Blocked

The only magnets that pass: hashes RD has never seen before (no cached metadata to check against). Source: community reports across Reddit, May 10–11, 2026.

It's no longer "filtering piracy scene releases." Real-Debrid is blocking every known torrent hash in its cache. Public domain films. Music albums. Your own library. The service is technically online — but the core function is dead.

What still works, what doesn't

Still working

Existing library
Previously downloaded torrents still stream and download
Hoster links
Supported file hosters remain functional
Website & browser player
Direct browser access and the RD player work
Link generation
Generating download links from existing library content works
Payments
Still accepting subscriptions — switched crypto processor from CommerceCB to CoinGate on May 10

Dead

Adding any known torrent
Returns infringing_file regardless of content
Cache availability check
The instantAvailability endpoint has been disabled since Nov 2024
Stremio / Torrentio / Comet
Broken — these addons depend on adding cached torrents
Kodi scrapers
Broken — same torrent-addition dependency
Re-adding from own library
Even hashes already in your account are blocked

The silence that speaks

On the same day the blocking escalated, Real-Debrid posted on X/Twitter — not about the content purge, but about switching crypto payment processors: "We just ditched @CommerceCB, welcome to @CoinGatecom for crypto payments on Real-Debrid." That was it. No acknowledgment of the filtering. No explanation. No timeline for resolution. Their last public statement about content filtering remains the November 22, 2024 FNEF compliance announcement.

By May 11, monitoring service IsDown reported approximately 2,000 user outage reports in 24 hours, with impact spanning the US, Canada, Sweden, Brazil, and multiple EU countries. The official Real-Debrid status page acknowledged nothing.

ElfHosted, a popular hosted Stremio/Plex debrid platform, released what they called a "band-aid fix" — but the community consensus was blunt: "there's nothing the community can do." Some users found that a VPN restored playback of existing cached content, but this does not fix the torrent-addition blocking — no new content can be added regardless.

The user exodus is already underway. TorBox is the primary beneficiary, with migration threads appearing across r/StremioAddons and r/RealDebrid within hours of the blocking escalation.

* * *
Chapter VII

The Arrest Question

We searched extensively for any evidence that the two founders have been arrested, charged, detained, or subjected to garde à vue. We found nothing.

Source verification matrix

Source type What was searched Result
French national press (BFM TV, Challenges, Numerama, 01net, Le Monde) "real-debrid" + arrestation / garde à vue / interpellation Nothing
TorrentFreak (2024–2026 archives) Real-Debrid legal action Civil only
Reddit (r/RealDebrid, r/Piracy, r/StremioAddons, r/FrancePirate) Arrest / raid / shutdown Speculation
French court sources (Légifrance, Village Justice, Cour de cassation) XT Network, Real-Debrid rulings ISP blocking only
Corporate registries (Societe.com, Pappers, Verif, Infonet, data.gouv.fr) Company status, director changes Active, directors listed
English-language tech press (TROYPOINT, Last Movie Outpost, Heise) Real-Debrid arrest / seized Misleading headlines

The "French Court Closes Real Debrid" headline from Last Movie Outpost is clickbait — the article describes the FNEF formal notice and voluntary compliance, not a court closure. YouTube videos titled "Real Debrid Shutting Down" are speculation by content creators, not reporting.

Both founders remain active directors of their respective holding companies. XT Network's company registration is active. The SARL→SAS conversion on May 7 was a proactive restructuring, not a response to a legal proceeding. If the founders were under investigation, it would be unusual (though not impossible) for them to execute a major corporate reorganization in the same period.

What we can't rule out

A sealed investigation (information judiciaire) under French law would not appear in public records until charges are brought. It is theoretically possible that a criminal investigation exists that we cannot see. However, the corporate restructuring activity — including signing updated statutes — would be unusual behavior for individuals under active criminal investigation with knowledge of that fact.

* * *
Chapter VIII

The Bigger Picture: France Burns It All Down

Real-Debrid's crisis didn't happen in a vacuum. April and May 2026 saw a seismic shift in French piracy enforcement — a month in which the old system was declared dead and a new, far more aggressive one took its place.

Hadopi is dead

On April 30, 2026, the Conseil d'État — France's highest administrative court — struck down the core of the Hadopi "graduated response" system, ruling it incompatible with EU law on personal data protection. The ruling, brought by La Quadrature du Net after a seven-year legal battle, means that Arcom (Hadopi's successor) can no longer refer individual pirates to a judge through the three-strikes mechanism. The 2010 decree governing the system was declared illegal. France's 17-year experiment in punishing individual downloaders is effectively over.

But infrastructure blocking goes nuclear

The same month that France stopped punishing individual pirates, it launched the most comprehensive infrastructure blocking regime in European history. Seven simultaneous orders from the Tribunal Judiciaire de Paris (dated March 18, 2026) require 35 pirate sports streaming sites to be blocked by:

A separate April 17 ruling extended this to DNS4EU, the EU-funded "sovereign" DNS alternative operated by Czech firm Whalebone — which then applied the blocks globally, affecting users outside France. And on April 30, Arcom filed its first-ever Digital Services Act enforcement action against Telegram, threatening up to 6% of worldwide revenue for failing to combat illegal sports streaming.

A European study published the same week showed that all of France's blocking measures are "circumvented in two clicks." The irony appears lost on the judiciary.

The IPTV kingpins are falling

The enforcement isn't just French. Europe-wide, IPTV operators are getting sentences that would have been unthinkable five years ago:

Major piracy convictions (April–May 2026)

Defendant Network Sentence Revenue Court
"Dash the Iranian" IPTVStack / RapidIPTV (2M subs) 23 months + €8.7M fine $17M + ~1,000 BTC Spain (National Audience)
Mark Gould + 4 Flawless TV (Premier League) 11 yrs → up to 21 yrs €7.5M+ Derby Crown Court, England
"HexDex" (21, Vendée) ~100 data breaches Remanded in custody N/A Paris (Parquet)
The strategy has shifted from punishing users to cutting off access at every possible intermediary. ISPs, DNS, VPNs, search engines, Telegram — and debrid services. Analysis based on 13 French court orders, April–May 2026

The message is clear: France has given up on Hadopi's retail approach to piracy enforcement and gone wholesale. Instead of warning millions of individual downloaders, the state is targeting infrastructure providers. ISPs. VPNs. DNS resolvers. Search engines. Messaging platforms. And services like Real-Debrid that sit at the nexus of the entire Stremio/Kodi piracy ecosystem.

In this context, the Real-Debrid restructuring looks less like paranoia and more like rational risk management. the founders can read the room. They spent 15 years building a piracy-adjacent service that made them millionaires. Now the French state is closing every exit. The SARL→SAS conversion, the holding company indirection, the aggressive content filtering — it's all the same move: reduce personal exposure while the service still generates revenue, and comply aggressively enough that criminal prosecution becomes hard to justify.

Whether that bet pays off remains to be seen.

* * *
Chapter IX

Methodology & Sources

Research audit trail

  1. Phase 1 — Arrest investigation: SearXNG queries across French and English sources for "real-debrid" + arrest/seized/shutdown/garde à vue/interpellation. Checked TorrentFreak, BFM TV, Challenges, Numerama, 01net, Le Monde, Reddit (6 subreddits), Légifrance, Village Justice. Result: no arrests found.
  2. Phase 2 — Corporate intelligence: Full company profiles from Societe.com, Pappers.fr, Verif.com, Infonet.fr, annuaire-entreprises.data.gouv.fr, Figaro Entreprises, RubyPayeur, Dun & Bradstreet. Identified both founders, holding companies, May 2026 restructuring, financial data.
  3. Phase 3 — Founder deep-dive: Searched all mandates for the founders across French registries. Identified HOWLOO, DEVIUS, DATARIUS, 4 real estate SCIs, personal consulting entity. Found addresses via BODACC filings, social media via name searches, business associates via Societe.com.
  4. Phase 4 — Financial analysis: HOWLOO and DEVIUS 2024 accounts from Societe.com. Cross-referenced with Banque de France ANACREDIT data. Calculated combined profits and cash positions.
  5. Phase 5 — Breaking situation (May 10–11): Identified Reddit threads across r/RealDebrid, r/Stremio, r/Addons4Kodi, r/StremioAddons, r/debridmediamanager. Technical analysis of infringing_file errors from publicly posted community testing on r/debridmediamanager. Checked Real-Debrid X/Twitter (May 10 post about CoinGate crypto switch — no mention of blocking). Checked Trustpilot (2.5/5, 293 reviews).
  6. Phase 6 — French enforcement landscape: Fetched and analyzed Conseil d'État Hadopi ruling, TJ Paris blocking orders (via TorrentFreak, 01net, Clubic, Journal du Geek), Arcom vs Telegram (via UniversFreeBox), "Dash the Iranian" sentencing (via Presse-Citron, Ouest-France), HexDex arrest (via The Record, BFM TV), DNS4EU ruling (via TorrentFreak).
  7. Phase 7 — Blocking status verification (May 11): Corroborated community API testing reports confirming escalation from filename-based filtering to total hash blocking. Verified via IsDown (~2,000 user reports in 24 hours, incident since May 10 20:24 UTC). Checked ElfHosted band-aid fix thread, user migration reports to TorBox, VPN workaround scope. Confirmed RD posted about CoinGate crypto switch on May 10 but acknowledged nothing about blocking.

News & Legal Sources

  1. TorrentFreak — Real-Debrid Anti-Piracy Filters (Nov 22, 2024)
  2. TorrentFreak — Traffic Falls 16% (Feb 16, 2025)
  3. KultureGeek — Real-Debrid durcit ses règles (Nov 2024)
  4. Presse-Citron — Streaming illégal (Nov 2024)
  5. Planète Warez — Real-Debrid serre la vis (Nov 2024)
  6. Real-Debrid — Legal / Terms of Service
  7. Conseil d'État — Hadopi ruling (Apr 30, 2026)
  8. La Quadrature du Net — "Hadopi (2009–2026)"
  9. TorrentFreak — DNS4EU blocking order (Apr 29, 2026)
  10. 01net — 35-site blocking offensive (Apr 15, 2026)
  11. UniversFreeBox — Arcom vs Telegram (Apr 30, 2026)
  12. Presse-Citron — "Dash the Iranian" sentenced (Apr 24, 2026)
  13. Ouest-France — IPTV operator sentenced (Apr 22, 2026)
  14. Foot01 — Flawless TV: up to 21 years (May 2, 2026)
  15. The Record — HexDex arrest (Apr 22, 2026)
  16. Clubic — Simultaneous FAI/DNS/VPN blocking (Apr 13, 2026)
  17. TROYPOINT — "Organized Piracy Crime" report (May 2026)
  18. Village Justice — TJ Paris blocking orders
  19. IsDown — Real-Debrid status (~2,000 reports, May 10–11, 2026)
  20. r/debridmediamanager — Filename-based filtering analysis (May 10, 2026)
  21. r/RealDebrid, r/StremioAddons, r/Stremio — User reports and escalation tracking (May 10–11, 2026)
  22. r/StremioAddons — ElfHosted band-aid fix thread (May 10, 2026)
  23. Real-Debrid X/Twitter — CoinGate crypto payment switch post (May 10, 2026)

French Corporate Registries

  1. Societe.com — XT Network SAS (530125319)
  2. Pappers.fr — XT Network SAS
  3. Societe.com — Founder A director profile redacted
  4. Societe.com — Founder B director profile redacted
  5. Pappers.fr — Founder A director profile redacted
  6. Pappers.fr — Founder B director profile redacted
  7. Infonet.fr — Founder A / XT Network redacted
  8. Infonet.fr — Founder B / XT Network redacted
  9. Societe.com — HOWLOO (844766113)
  10. Societe.com — DEVIUS (844833517)
  11. data.gouv.fr — DEVIUS
  12. data.gouv.fr — XT Network
  13. Societe.com — DATARIUS (953853637)
  14. Verif.com — Founder A director profile redacted
  15. Dun & Bradstreet — XT Network
  16. RubyPayeur — XT Network
  17. Figaro Entreprises — XT Network