A 22-year-old Canadian hacker, Andean Medjedovic, is currently on the run after allegedly exploiting a flaw in KyberSwap, a decentralized finance (DeFi) protocol, to steal $48.8 million in cryptocurrency, according to a recent indictment.
The U.S. Attorney’s Office for the Eastern District of New York claims that Medjedovic took advantage of weaknesses in KyberSwap’s code back in 2023.
Medjedovic is said to have manipulated the protocol’s liquidity pools (LPs) by borrowing vast sums of cryptocurrency, inflating prices artificially.
This led to a “glitch” in KyberSwap’s automated market maker (AMM), which allowed him to drain $48.8 million from 77 LPs spread across six public blockchains.
The hacker then allegedly attempted to blackmail KyberSwap’s developers, demanding control over the protocol and its decentralized autonomous organization (DAO) in exchange for half of the stolen assets. Medjedovic is also accused of laundering the stolen funds through various methods, including digital asset mixers and bridge protocols.
The indictment also references a previous hack in 2021, in which Medjedovic allegedly exploited Indexed Finance, siphoning off $16.5 million. He faces charges of wire fraud, computer hacking, and attempted extortion, as revealed in a Brooklyn federal court filing.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.
The first half of 2025 has become the most damaging six-month period in crypto history, with over $2.1 billion stolen across 75+ separate incidents, according to new data.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.