Cryptocurrency
[loss] $16M+
"After 'Stealing' $16M, This Teen Hacker Seems Intent on Testing 'Code Is Law' in the Courts"
Primary Source ↗Financial Loss
$16.0M
(16,000,000 USD)
Blockchain(s)
Ethereum
Incident Details
A hacker drained $16 million from Indexed Finance, a defi protocol built on the Ethereum blockchain. The stolen funds represented nearly half of the total value locked on the platform. The hacker was later revealed to allegedly be an 18-year-old Canadian named Andy Medjedovic, who continued to refuse to return the funds even when his identity was revealed. The hacker argues that he simply took advantage of an arbitrage opportunity, and swore to “fight to the death” in court over his right to keep the money. However, the hacker never showed up to a December court appearance, and a warrant was issued for his arrest.
Total loss estimated at $16,000,000.
Technical Details
- Initial Attack Vector
- Flash loan attack on smart contract
- Vendor / Product
- Indexed Finance
Timeline
- 2021-10-14 Breach occurred
- 2021-10-14 Publicly disclosed