You probably won't find one, so let me help from lurking and reading things.
Sets of chat logs were exported from Snakething's Telegram account by leaker(s) gaining access to it. So Snakething was the common denominator with dozens of suspects, either in direct chat or a few groups, and it was meant to get a lot of them.
Before getting into the method, this is part of the basic question about how reliable are the logs?
----
Even if you don't know the method, there's still proof in results, like arrests and Snakething's conviction. There's also reinforcement from account histories on other sites, and DM's between the suspects and other acquaintances who couldn't possibly have created them without foreknowledge.
Does comparing other sources show any false evidence was inserted? No, nothing false has come out, and with all this time and attention, there would be something if it existed. There's just flimsy counter theories like saying HTML can be edited. That only makes sense if matching account histories don't exist, or were created by hacking many accounts and putting original posts in them for years.
Was any evidence removed? Word is leaker(s) have themselves edited out. Some of the logs also don't have videos and files. That was claimed to be an issue of short time for downloading, but could also be withholding dangerous material like CP. It could be either thing.
All evidence says the logs check out. Now we're back to how did the leaker(s) get them?
-----
You might learn things from the thread for
Chris Bryant/Simba Lion. He has an operation to gather private info on targets, then do blackmail for Financial Domination fetish (FinDom), or sextortion. There's a whole underworld for this. Add illicit porn or valuable access to people or services, and you get vigorous trading and a pecking order.
Snakething took advantage of this to grow a rolodex of perverts and a library of "rare porn". Leaker(s) caught on and used the same trade to gather leverage. If they found someone doing something illegal, they could threaten them to get more access.
As far as we know the main leaker was Akela (Zoodonym), initially assisted by Shadowwoof, who supposedly retired. Both were familiar with admins of zoophile groups.
Schisms among the zoos would be a whole other deep story, but they had philosophical differences over where the line was between "consenting" animal fucking and zoosadism, and how to keep it quiet when so called animal lovers couldn't help raping. Admins and old-school connected members were doing zoosadism and even more illegal stuff, but of course "ethics" were a pretense, their concern was not outing "innocent zoos" and group secrecy. Supposedly this made Akela's motive to clean up the zoo groups.
The leaks came from a process of gaining access by social engineering. The logs show Snakething indulging in the blackmail games himself. EliteKnight looks like a patsy who was too thirsty for dog rape content and made himself open to leverage. He made a dog rape video to get credit for more, and that was used against him. Either his account was used to engage Snakething in password trading, or it was direct on a separate occasion. Either way, Snakething's dog rape video would have been leverage too. Eliteknight and Snakething then got exposed. There were higher targets but that's enough to give you the background.
