Trump Butler PA Shooting: Lone Gunman vs Inside-Job Claims (13 Jul 2024)
Introduction
On 13 July 2024, Thomas Matthew Crooks, a 20-year-old from Bethel Park, Pennsylvania, fired on a Trump campaign rally at the Butler Farm Show grounds in Butler, Pennsylvania. A bullet grazed former President Donald Trump's right ear. Audience member Corey Comperatore was killed, and two others were critically wounded. Crooks was shot dead by U.S. Secret Service counter-snipers seconds after opening fire. The attack was the most serious assassination attempt on a U.S. presidential candidate in decades.
The incident generated immediate and intense scrutiny of Secret Service performance. Within days, conspiracy claims circulated widely: that the security failures were not accidental but deliberate — that someone within the Secret Service, the Biden administration, or a broader political network had intentionally allowed Crooks to position himself and fire.
What the Evidence Shows
Crooks fired from the roof of the AGR International building, approximately 130 metres from the main stage. The roof was outside the outer security perimeter but had a direct sightline to the stage. Local law enforcement officers identified Crooks as a suspicious person approximately 30 minutes before the shooting and reported this up the chain. Despite this, no Secret Service agent intercepted Crooks before he fired.
The FBI took over the investigation immediately. The agency established that Crooks acted alone, had conducted surveillance of the rally site in the days before the attack, and legally purchased the AR-style rifle used. No accomplice, co-conspirator, or handler was identified. The FBI found no evidence of a wider plot.
Congressional Investigations
The Senate Homeland Security and Governmental Affairs Committee (HSGAC) launched a bipartisan investigation. A separate bipartisan House Task Force on the Assassination Attempt completed work in 2025. Both bodies reviewed Secret Service communications, pre-event planning documents, and the chain of information flow regarding Crooks.
The investigations identified significant failures: the AGR rooftop was identified as a vulnerability before the event but not adequately secured; communication between local law enforcement and Secret Service was poorly coordinated; the agency was understaffed for an event of this profile. The Task Force described these as systemic failures attributable to resource shortfalls and coordination breakdowns — not to deliberate malfeasance.
Secret Service Director Kimberly Cheatle resigned on 22 July 2024 after a contentious congressional hearing. Her testimony was widely criticised as evasive, but neither she nor any other official was found to have intentionally enabled the attack.
The Inside-Job Framing
The inside-job claim takes several forms. The most common version holds that deliberate stand-downs were ordered — that agents or supervisors were instructed to leave the rooftop unsecured to create an opportunity for Crooks to fire. A related version attributes the alleged conspiracy to the Biden administration, arguing that political motivation drove the security failure.
Neither version is supported by the investigative record. The congressional reports describe a failure of coordination and resource allocation, not a deliberate stand-down. No whistleblower with operational knowledge has produced evidence of an order to allow the attack. No communication, document, or testimony linking Crooks to any political handler has been produced.
Crooks: Motive and Background
The FBI found no clear political motive for Crooks. He had reportedly researched both Trump and Biden events, was registered as a Republican voter but had donated $15 to a progressive group in 2023, and had no documented ideological manifesto. The absence of a clear motive has been used by some conspiracy framers as evidence of a handler — the argument that unexplained motive implies external direction. This is an argument from ignorance: the absence of a documented motive does not constitute evidence of a conspiracy.
Verdict
The inside-job framing is not supported by FBI findings, congressional investigation outcomes, or any evidentiary record. The security failures were real, serious, and consequential — but the investigations attribute them to coordination failures, not to deliberate enablement of the attack.
What Happened at Butler Farm Show Grounds
Crooks arrived at the Butler Farm Show Grounds hours before Trump took the stage on 13 July 2024. He climbed onto the roof of the AGR International building, a manufacturing facility roughly 130 metres from the podium, carrying an AR-15-style semi-automatic rifle he had purchased legally. At approximately 6:11 p.m., he fired a series of shots — reporting places the count at eight rounds — toward the stage. One bullet grazed Trump's upper right ear. Corey Comperatore, a 50-year-old former fire chief attending with his wife and daughters, was struck and killed; witnesses said he had shielded his family as the shooting began. Two other attendees, David Dutch, 57, and James Copenhaver, 74, were critically wounded. U.S. Secret Service counter-snipers returned fire and killed Crooks within seconds of his first shots. The entire exchange, from Crooks' first round to his death, lasted well under a minute. Four law enforcement officers also sustained minor injuries from flying debris during the exchange.
The "Staged" Claims — and Why Each One Fails
Several distinct claims fall under the "staged" or "inside job" umbrella, and each has a specific, checkable flaw.
The most viral version centers on the Associated Press photograph of Trump pumping his fist as agents moved to shield him, blood visible on his face. A digitally altered copy of that image, showing Trump smiling rather than grimacing, circulated widely as "proof" the moment was rehearsed. Fact-checkers traced the smiling version to a manipulated edit; the authentic AP photograph shows no such expression, and video from multiple independent angles shows the same unscripted sequence — a struck, bleeding candidate reacting in real time, not a staged tableau.
A related "too clean" argument holds that the optics were simply too favorable to be accidental. This is an aesthetic judgment, not evidence; a dramatic photograph emerging from a chaotic, unplanned event is unsurprising given the number of press photographers already positioned at the rally, and no forensic, financial, or testimonial evidence has linked the image's composition to any advance planning.
A third claim, seeded in an anonymous 14 July 2024 post on the message board 4chan, alleged that a Secret Service sniper named "Jonathan Willis" had Crooks in his sights but was ordered to hold fire. The Secret Service confirmed it employs no one by that name and called the claim "categorically false"; fact-checkers found no corroborating personnel record, colleague, or document — only the original anonymous post.
Finally, some point to polling showing that, weeks after the shooting, a majority of Americans surveyed doubted Crooks acted alone. Public sentiment measured before investigators had finished their work is not evidence of a conspiracy; it reflects an information vacuum, not a documented fact pattern.
What Investigators Found: FBI, the House Task Force, and DHS
The FBI's most complete account came in November 2025, when Director Kash Patel announced the closure of what officials described as one of the bureau's largest investigations: more than 480 employees, over 1,000 interviews conducted worldwide, and nearly 500,000 digital files reviewed. The conclusion matched the agency's preliminary July 2024 finding — Crooks acted alone, with no domestic or foreign accomplice, no leaked intent shared with anyone, and, per Patel, "no foreign connection" of any kind.
The bipartisan House Task Force's final report, approved in December 2024 after reviewing roughly 20,000 pages of documents and conducting 46 transcribed interviews, reached a parallel conclusion: the failures were structural, not deliberate. It issued recommendations covering staffing, training, and resource allocation, urging the Secret Service to prioritize protecting domestic officials over some foreign-dignitary details.
A DHS Office of Inspector General report released in June 2026 added granular detail to that structural-failure picture. It found the Secret Service's counter-drone system was inoperable when Crooks flew a drone over the site less than 90 minutes before the shooting, that the agency's lone counter-drone operator had received only about 20 minutes of informal training, and that a request to block the shooter's eventual sightline with parked vehicles was initially declined over concerns it would obstruct press camera angles. The Secret Service concurred with all of the report's corrective recommendations rather than disputing its findings — a posture inconsistent with a cover-up. Director Kimberly Cheatle resigned days after the attack; Deputy Director Ronald Rowe was named acting director in her place.
A Second Attempt: Ryan Routh, September 2024
Two months after Butler, the pattern of isolated, non-coordinated threats repeated. On 15 September 2024, a Secret Service agent scanning ahead of Trump's arrival at his golf club in West Palm Beach, Florida, spotted a rifle barrel protruding from a fence line and opened fire; the would-be shooter, Ryan Wesley Routh, fled without firing a shot and was later stopped on Interstate 95. A federal jury convicted Routh on all five charges, including attempted assassination of a major presidential candidate, on 23 September 2025. He was sentenced to life in prison plus seven years by a federal judge in February 2026. Investigators found no link between Routh and Crooks; the two men never had contact, and Routh's case proceeded as a wholly separate prosecution — evidence against, not for, a single coordinated plot.
Aftermath
The Butler shooting reshaped presidential-campaign security practice, prompting new Secret Service leadership, expanded protective resources for both major-party nominees, and the legislative recommendations from the Task Force's report. Cheatle's replacement and the subsequent DHS review reflect an institution absorbing genuine, documented failure rather than concealing it. Public skepticism has persisted in polling, but no whistleblower, internal document, or piece of physical evidence produced in the nearly two years of investigation that followed has surfaced to support the inside-job framing; each new official review — FBI, congressional, and inspector general — has independently converged on the same account of negligence rather than intent.
The Bottom Line
What the record documents is not a staged event but a catastrophic security failure: a lone 20-year-old gunman reached an unsecured rooftop with a clear line of sight, a rally-goer was killed and two others were wounded, and the shooter himself was killed by a Secret Service counter-sniper. Every element the staged theory treats as suspicious, from the composed photograph to the quick response to the agency stumbles, is better explained by ordinary chaos, professional training, and institutional dysfunction than by a script no investigation ever found.
Evidence Filters13
FBI: Crooks acted alone — no accomplice or handler found
DebunkingStrongThe FBI investigation found no evidence of a co-conspirator, handler, or wider plot. Crooks purchased the rifle legally, conducted pre-event surveillance independently, and acted without documented coordination.
Rooftop identified as vulnerability pre-event — not secured
DebunkingStrongThe AGR building rooftop was identified by local law enforcement as a potential vulnerability before the rally. The failure to secure it was documented in congressional investigations as a coordination and resource failure, not a deliberate stand-down.
Rebuttal
The failure to act on a pre-identified vulnerability is consistent with either negligence or deliberate enablement. Congressional investigators attributed it to coordination breakdown; no evidence of a deliberate order to leave the roof unsecured has been produced.
Secret Service Director Cheatle resigned after evasive congressional testimony
SupportingWeakKimberly Cheatle resigned on 22 July 2024 following a widely criticised congressional hearing. Her evasive responses fuelled suspicion of a cover-up. Congressional investigators found systemic failures, not deliberate malfeasance.
Rebuttal
Evasive testimony and resignation are consistent with embarrassment over institutional failure — they do not require a deliberate assassination-enabling conspiracy. Cheatle was not found to have issued a stand-down order.
Bipartisan House Task Force: coordination failures, not deliberate enablement
DebunkingStrongThe bipartisan House Task Force on the Assassination Attempt concluded in 2025 that security failures were attributable to resource shortfalls and coordination breakdowns. The report did not support the inside-job framing.
Crooks had no documented political handler or manifesto
DebunkingThe FBI found no clear political motive, no ideological manifesto, and no communications with any handler. Crooks had researched both Trump and Biden events. The absence of documented motive has been used to infer a handler — an argument from ignorance.
Rebuttal
Unexplained motive does not constitute evidence of external direction. Many lone-actor attacks have poorly documented or ambiguous motives. The FBI found no evidence of a handler despite extensive investigation.
Corey Comperatore killed; two others critically wounded
DebunkingWeakThe attack killed one audience member and critically wounded two others. A deliberate inside-job framing must account for why an operation designed to facilitate an assassination would also produce collateral casualties inconsistent with a controlled operation.
Local law enforcement flagged Crooks as suspicious 30 minutes before attack
SupportingWeakLocal officers spotted Crooks as a suspicious person and reported this up the chain approximately 30 minutes before the shooting. This was documented in the investigations and contributed to the finding of coordination failure. It is also cited by inside-job framers as evidence of deliberate inaction.
Rebuttal
The 30-minute window between identification and the shooting is consistent with both coordination failure (no clear escalation protocol) and deliberate stand-down. Congressional investigators found no evidence of a deliberate order; the weight of evidence supports the coordination-failure account.
No whistleblower with operational knowledge has come forward
DebunkingStrongNo Secret Service agent, local officer, or other official with direct operational knowledge has come forward to confirm an order to allow the attack. The inside-job framing requires such an order to have been issued and obeyed without a single insider disclosure.
Trump's fist-pump photo circulated in an altered, "too clean" form
SupportingWeakAfter Trump was struck, an AP photograph showing him pumping his fist as agents moved to shield him went viral; a digitally altered version showing him smiling — rather than grimacing — spread as claimed proof the moment was staged, an argument some also framed as the whole scene looking "too clean" for a real assassination attempt.
Rebuttal
Fact-checkers (FactCheck.org) traced the smiling image to a manipulated edit; the authentic AP photograph and independent video from multiple angles show Trump grimacing with visible blood, consistent with an unscripted reaction. No forensic, financial, or testimonial evidence has linked the photo's composition, or the number of press photographers already positioned at the rally, to any advance planning.
Polling found a majority of Americans doubted the lone-gunman finding
SupportingWeakSurveys conducted in the weeks after the shooting found that over half of Americans polled believed Crooks did not act alone, which proponents cite as evidence the official account lacks public confidence.
Rebuttal
Public belief measured before investigators had finished their work reflects an information vacuum, not a documented fact pattern. No poll respondent, then or since, has produced a document, witness, or piece of physical evidence contradicting the FBI's conclusion, reaffirmed after a nearly 500,000-file review in November 2025, that Crooks acted alone.
Show 3 more evidence points
A request to block the shooter's sightline with trucks was denied before the attack
SupportingThe Secret Service's site team proposed positioning trucks between the AGR building and the stage to block the eventual line of fire; the request was declined. Proponents cite this as proof the exposure was intentional.
Rebuttal
The DHS Office of Inspector General's June 2026 report (OIG-26-13) found the request was declined because planners judged the trucks would obstruct press camera angles of Trump — a documented negligent tradeoff, not sabotage. The report calls it a 'missed opportunity' among several process failures, and the Secret Service concurred with all of the Inspector General's corrective recommendations rather than disputing the finding.
An anonymous post claimed a named Secret Service sniper was ordered to hold fire
SupportingWeakA 14 July 2024 post on the message board 4chan, attributed to a 'Jonathan Willis,' claimed to be a Secret Service sniper who had Crooks in his sights for minutes but was denied permission to shoot.
Rebuttal
The Secret Service confirmed it employs no one named Jonathan Willis and called the claim 'categorically false.' PolitiFact and FactCheck.org traced the post to an anonymous account active for only a few hours, with no personnel record, colleague, or corroborating document behind it.
FBI's November 2025 closure reaffirmed no accomplice after a nearly 500,000-file review
DebunkingStrongIn November 2025, FBI Director Kash Patel announced the bureau's final conclusion on the case: more than 480 employees, over 1,000 interviews worldwide, and roughly 500,000 digital files reviewed, all reaffirming that Crooks acted alone with no domestic or foreign accomplice and 'no foreign connection' of any kind.
Evidence Cited by Believers6
Secret Service Director Cheatle resigned after evasive congressional testimony
SupportingWeakKimberly Cheatle resigned on 22 July 2024 following a widely criticised congressional hearing. Her evasive responses fuelled suspicion of a cover-up. Congressional investigators found systemic failures, not deliberate malfeasance.
Rebuttal
Evasive testimony and resignation are consistent with embarrassment over institutional failure — they do not require a deliberate assassination-enabling conspiracy. Cheatle was not found to have issued a stand-down order.
Local law enforcement flagged Crooks as suspicious 30 minutes before attack
SupportingWeakLocal officers spotted Crooks as a suspicious person and reported this up the chain approximately 30 minutes before the shooting. This was documented in the investigations and contributed to the finding of coordination failure. It is also cited by inside-job framers as evidence of deliberate inaction.
Rebuttal
The 30-minute window between identification and the shooting is consistent with both coordination failure (no clear escalation protocol) and deliberate stand-down. Congressional investigators found no evidence of a deliberate order; the weight of evidence supports the coordination-failure account.
Trump's fist-pump photo circulated in an altered, "too clean" form
SupportingWeakAfter Trump was struck, an AP photograph showing him pumping his fist as agents moved to shield him went viral; a digitally altered version showing him smiling — rather than grimacing — spread as claimed proof the moment was staged, an argument some also framed as the whole scene looking "too clean" for a real assassination attempt.
Rebuttal
Fact-checkers (FactCheck.org) traced the smiling image to a manipulated edit; the authentic AP photograph and independent video from multiple angles show Trump grimacing with visible blood, consistent with an unscripted reaction. No forensic, financial, or testimonial evidence has linked the photo's composition, or the number of press photographers already positioned at the rally, to any advance planning.
Polling found a majority of Americans doubted the lone-gunman finding
SupportingWeakSurveys conducted in the weeks after the shooting found that over half of Americans polled believed Crooks did not act alone, which proponents cite as evidence the official account lacks public confidence.
Rebuttal
Public belief measured before investigators had finished their work reflects an information vacuum, not a documented fact pattern. No poll respondent, then or since, has produced a document, witness, or piece of physical evidence contradicting the FBI's conclusion, reaffirmed after a nearly 500,000-file review in November 2025, that Crooks acted alone.
A request to block the shooter's sightline with trucks was denied before the attack
SupportingThe Secret Service's site team proposed positioning trucks between the AGR building and the stage to block the eventual line of fire; the request was declined. Proponents cite this as proof the exposure was intentional.
Rebuttal
The DHS Office of Inspector General's June 2026 report (OIG-26-13) found the request was declined because planners judged the trucks would obstruct press camera angles of Trump — a documented negligent tradeoff, not sabotage. The report calls it a 'missed opportunity' among several process failures, and the Secret Service concurred with all of the Inspector General's corrective recommendations rather than disputing the finding.
An anonymous post claimed a named Secret Service sniper was ordered to hold fire
SupportingWeakA 14 July 2024 post on the message board 4chan, attributed to a 'Jonathan Willis,' claimed to be a Secret Service sniper who had Crooks in his sights for minutes but was denied permission to shoot.
Rebuttal
The Secret Service confirmed it employs no one named Jonathan Willis and called the claim 'categorically false.' PolitiFact and FactCheck.org traced the post to an anonymous account active for only a few hours, with no personnel record, colleague, or corroborating document behind it.
Counter-Evidence7
FBI: Crooks acted alone — no accomplice or handler found
DebunkingStrongThe FBI investigation found no evidence of a co-conspirator, handler, or wider plot. Crooks purchased the rifle legally, conducted pre-event surveillance independently, and acted without documented coordination.
Rooftop identified as vulnerability pre-event — not secured
DebunkingStrongThe AGR building rooftop was identified by local law enforcement as a potential vulnerability before the rally. The failure to secure it was documented in congressional investigations as a coordination and resource failure, not a deliberate stand-down.
Rebuttal
The failure to act on a pre-identified vulnerability is consistent with either negligence or deliberate enablement. Congressional investigators attributed it to coordination breakdown; no evidence of a deliberate order to leave the roof unsecured has been produced.
Bipartisan House Task Force: coordination failures, not deliberate enablement
DebunkingStrongThe bipartisan House Task Force on the Assassination Attempt concluded in 2025 that security failures were attributable to resource shortfalls and coordination breakdowns. The report did not support the inside-job framing.
Crooks had no documented political handler or manifesto
DebunkingThe FBI found no clear political motive, no ideological manifesto, and no communications with any handler. Crooks had researched both Trump and Biden events. The absence of documented motive has been used to infer a handler — an argument from ignorance.
Rebuttal
Unexplained motive does not constitute evidence of external direction. Many lone-actor attacks have poorly documented or ambiguous motives. The FBI found no evidence of a handler despite extensive investigation.
Corey Comperatore killed; two others critically wounded
DebunkingWeakThe attack killed one audience member and critically wounded two others. A deliberate inside-job framing must account for why an operation designed to facilitate an assassination would also produce collateral casualties inconsistent with a controlled operation.
No whistleblower with operational knowledge has come forward
DebunkingStrongNo Secret Service agent, local officer, or other official with direct operational knowledge has come forward to confirm an order to allow the attack. The inside-job framing requires such an order to have been issued and obeyed without a single insider disclosure.
FBI's November 2025 closure reaffirmed no accomplice after a nearly 500,000-file review
DebunkingStrongIn November 2025, FBI Director Kash Patel announced the bureau's final conclusion on the case: more than 480 employees, over 1,000 interviews worldwide, and roughly 500,000 digital files reviewed, all reaffirming that Crooks acted alone with no domestic or foreign accomplice and 'no foreign connection' of any kind.
Timeline
Crooks fires on Trump rally at Butler, PA; Trump grazed, one killed
Thomas Matthew Crooks fires from the AGR International rooftop approximately 130 metres from the main stage. A bullet grazes Trump's right ear. Audience member Corey Comperatore is killed; two others critically wounded. Crooks is shot dead by counter-snipers seconds after opening fire.
Source →Fact-checkers debunk fake Secret Service 'stand-down' post
A 4chan post claiming a Secret Service sniper named 'Jonathan Willis' was ordered not to shoot Crooks began circulating; the Secret Service confirmed no such employee exists and called the claim categorically false, and PolitiFact/FactCheck.org traced it to an anonymous, uncorroborated post.
Source →Secret Service Director Cheatle resigns after congressional hearing
Director Kimberly Cheatle resigns following a contentious Senate hearing in which her responses were widely criticised as evasive. Her resignation accelerates demand for a full accounting of the security failures.
Source →Senate HSGAC investigation launched; congressional Task Force formed
The Senate Homeland Security and Governmental Affairs Committee and a bipartisan House Task Force begin formal investigations into the security failures at Butler. Both bodies review communications, pre-event planning, and the chain of information flow on Crooks.
Verdict
FBI investigation found Crooks acted alone with no accomplice or handler. Congressional investigations (Senate HSGAC and bipartisan House Task Force) attributed security failures to coordination breakdowns and resource shortfalls, not deliberate malfeasance. No whistleblower, document, or testimony supports the inside-job framing. The failures were real and led to Cheatle's resignation — but investigators found no evidence of intentional enablement.
Frequently Asked Questions
Was the Butler PA assassination attempt an inside job?
The FBI found no evidence of a co-conspirator, handler, or deliberate enablement. The bipartisan House Task Force and Senate HSGAC attributed security failures to coordination breakdowns and resource shortfalls, not to deliberate malfeasance. No whistleblower with operational knowledge has produced evidence of a stand-down order.
Why was the roof not secured if it was identified as a risk?
Congressional investigations found that local law enforcement identified the AGR rooftop as a potential vulnerability before the event but that the information was not acted on due to coordination failures between local police and the Secret Service. The failure is documented; the cause was attributed to resource and communication breakdowns, not to deliberate inaction.
What was Thomas Matthew Crooks' motive?
The FBI found no clear documented political motive. Crooks had researched both Trump and Biden events, was registered Republican but had donated to a progressive group, and left no ideological manifesto. The absence of a clear motive does not constitute evidence of an external handler — many lone-actor attacks have ambiguous or undocumented motivations.
Was Trump's fist-pump photo after being shot staged?
No. The original Associated Press photograph shows Trump grazed and bleeding as Secret Service agents moved to shield and evacuate him. A digitally altered version showing him smiling circulated online to support the staging claim; fact-checkers confirmed that smiling image was manipulated — the authentic photo shows no such expression.
Sources
Show 13 more sources
Further Reading
- paperLone-actor political violence: FBI behavioral threat assessment — FBI Behavioral Analysis Unit (2023)
- articleButler rally attack: comprehensive timeline (AP) — Associated Press (2024)
- articleHouse Releases Final Report on Trump Assassination Attempts — Lawfare (2024)
- paperHouse Task Force on the Assassination Attempt — final report — US House of Representatives (2025)
- articleFBI Concludes Would-Be Trump Assassin Thomas Crooks Acted Alone — Washington Examiner (2025)
- paperOIG-26-13: The Secret Service Missed Opportunities to Prevent and Disrupt the Attempted Assassination of President Trump on July 13, 2024 — DHS Office of Inspector General (2026)