Canadian Hacker Charged In $65 Million Crypto Heist: A Deep Dive

A Canadian hacker, Andean Medjedovic, has been charged by U.S. prosecutors for allegedly stealing approximately $65 million from two decentralized finance (DeFi) platforms, KyberSwap and Indexed Finance. The indictment, unsealed in a Brooklyn federal court, outlines a sophisticated scheme involving manipulation of smart contracts and extortion attempts, marking one of the most significant cybercrimes in the cryptocurrency space.

Key Takeaways

Andean Medjedovic, 22, faces multiple charges including wire fraud and money laundering.
The alleged hacks occurred between 2021 and 2023, with a total theft of $65 million.
Medjedovic remains at large, having evaded authorities since 2021.

Background Of The Case

The U.S. Department of Justice (DOJ) announced the charges on February 3, 2025, detailing how Medjedovic exploited vulnerabilities in the KyberSwap and Indexed Finance platforms. The indictment includes five counts against him, including wire fraud, unauthorized damage to a protected computer, attempted extortion, and money laundering conspiracy.

Medjedovic is accused of manipulating smart contracts and using deceptive trading tactics to siphon off funds from these platforms. His alleged exploits began in 2021 with Indexed Finance, where he reportedly stole $16 million by distorting price calculations through a re-indexing process.

The KyberSwap Exploit

In November 2023, Medjedovic executed a calculated attack on KyberSwap, draining approximately $48.8 million from 77 liquidity pools across six blockchains. He allegedly borrowed large sums of cryptocurrency to create artificial price movements, exploiting a flaw in the platform's algorithm.

After the hack, he attempted to extort the developers and investors of KyberSwap, demanding control of the platform in exchange for returning half of the stolen funds. This move highlights the audacity and sophistication of his operations.

Money Laundering Tactics

To obscure the origins of the stolen funds, Medjedovic employed various crypto-laundering techniques. These included:

Digital Asset Swaps: Transferring stolen assets through multiple exchanges to hide their source.
Bridging Transactions: Moving funds between different blockchains to complicate tracking efforts.
Cryptocurrency Mixers: Using services that blend multiple transactions to obscure the trail of funds.

International Cooperation

The case has garnered international attention, with significant assistance from law enforcement agencies in the Netherlands and U.S. Customs and Border Protection. The DOJ emphasized its commitment to prosecuting financial crimes in the rapidly evolving landscape of digital currencies.

Current Status

As of now, Medjedovic remains at large, with authorities continuing their efforts to apprehend him. If convicted, he faces severe penalties, including a maximum of 90 years in prison for the various charges against him. The case serves as a stark reminder of the vulnerabilities present in the DeFi space and the ongoing challenges in combating cybercrime in the cryptocurrency sector.