Cryptocurrency [loss] $16M+

"After 'Stealing' $16M, This Teen Hacker Seems Intent on Testing 'Code Is Law' in the Courts"

2021-10-14 [vendor] Indexed Finance [chain] ethereum
Primary Source ↗
Financial Loss $16.0M (16,000,000 USD)
Blockchain(s) Ethereum

Incident Details

A hacker drained $16 million from Indexed Finance, a defi protocol built on the Ethereum blockchain. The stolen funds represented nearly half of the total value locked on the platform. The hacker was later revealed to allegedly be an 18-year-old Canadian named Andy Medjedovic, who continued to refuse to return the funds even when his identity was revealed. The hacker argues that he simply took advantage of an arbitrage opportunity, and swore to “fight to the death” in court over his right to keep the money. However, the hacker never showed up to a December court appearance, and a warrant was issued for his arrest.

Total loss estimated at $16,000,000.

Technical Details

Initial Attack Vector
Flash loan attack on smart contract
Vendor / Product
Indexed Finance

Timeline

  1. 2021-10-14 Breach occurred
  2. 2021-10-14 Publicly disclosed