美國司法部已針對涉嫌的加密黑客提起訴訟，該公司聲稱該黑客從18歲開始就偷走了6500萬美元的加密貨幣。

現年22歲的安迪斯·梅傑多維奇（Andean Medjedovic）面臨五項指控，與起訴有關。這些指控的重點是據稱“從Kyberswap和Indexed Finance Sentrance Fanance（DEFI）協議中竊取了約6500萬美元的加密貨幣”。

The US Department of Justice has filed charges against an alleged crypto hacker, who it claims stole $65 million in cryptocurrency, starting when he was just 18 years old.

美國司法部已針對涉嫌的加密黑客提起訴訟，該公司聲稱該黑客從18歲開始就偷走了6500萬美元的加密貨幣。

The now 22-year-old Andean Medjedovic faces five charges, linked to an indictment. The focus of these charges is for allegedly "stealing approximately $65 million in cryptocurrency from the KyberSwap and Indexed Finance decentralised finance (DeFi) protocols".

現年22歲的安迪斯·梅傑多維奇（Andean Medjedovic）面臨五項指控，與起訴有關。這些指控的重點是據稱“從Kyberswap和Indexed Finance Sentrance Fanance（DEFI）協議中竊取了約6500萬美元的加密貨幣”。

The first hack, in relation to Indexed Finance, involved a systemic vulnerability. Effectively, Indexed Finances managed to cut out many of the middle management fees from trades with built-in regulatory systems, and this reduced overhead partially led to its renown. However, that also appeared to be its fault.

與索引金融有關的第一個黑客涉及系統性脆弱性。有效地，索引財務設法從內置監管系統中削減了許多中層管理費，這會降低間接費用，部分導致了它的聲望。但是，這似乎也是它的錯。

Indexed Finance is monitored with a complex system of checks and balances by adjusting pool prices and liquidity (the cost and size of the digital market that users can purchase) for its crypto funds to incentivise or disincentive users from trading. As pointed out in Bloomberg's investigation of Indexed Finance in 2022, "This model assumed users would interact rationally with the protocol, buying low and selling high".

通過調整泳池價格和流動性（用戶可以購買的數字市場的成本和規模），通過複雜的製衡系統來監視索引融資，以激勵或阻止用戶交易。正如彭博（Bloomberg）在2022年對索引金融的調查中所指出的那樣，“該模型假設用戶將與協議合理互動，低購買和銷售高價互動”。

Medjedovic allegedly exploited this by loaning over $150 million in a 'flash loan' where he borrowed and gave back crypto assets in a single line of programmed transactions. This code would then purchase a vast supply of tokens immediately, artificially pumping their value, where it would then swap that currency for a different one through an action known as "minting". In this same action, another flash loan would be taken to purchase a different token known as Sushi.

據稱，Medjedovic通過在“ Flash Loan”中貸款超過1.5億美元，在那裡他借了一筆超過1.5億美元，並以一系列編程的交易贈送了加密貨幣資產。然後，該代碼將立即購買大量的代幣，人為地泵送其價值，然後通過稱為“鑄造”的動作將該貨幣交換為不同的貨幣。在同一動作中，將藉另一筆閃光貸款購買另一種名為Sushi的令牌。

That Sushi token would find its way into the pool of currency, which would navigate around restrictions on the amount of tokens that can be introduced. Sushi would then be traded for the original tokens, which are now undervalued.

壽司代幣將進入貨幣庫，這將圍繞對可以引入的令牌數量的限制進行導航。然後將壽司交易為原始令牌，現在被低估了。

This process is claimed by the DoJ to have finished with Medjedovic burning and minting the supply of tokens to trade $4 million worth of Sushi tokens in $21 million worth of others. The loan is repaid, and he is being accused of cashing out $11.9 million for himself. Interestingly, a key part of this process is that the code gifted the Sushi tokens back to the pool, which isn't something a rational buyer would do, thus explaining how this system got around Indexed Finance's protocols.

司法部聲稱，這一過程已經完成了Medjedovic燃燒，並鑄造了價值400萬美元的壽司代幣的供應，其中價值2100萬美元。貸款是償還的，他被指控兌現了1,190萬美元。有趣的是，此過程的關鍵部分是，該代碼將壽司代幣贈予了池，這不是理性買家會做的，從而解釋了該系統如何圍繞索引融資的協議。

After being offered 10% of the cryptocurrency by Indexed Finance, in exchange for Medjedovic handing the cryptocurrency back to them, he allegedly turned this down and instead taunted Indexed Finance's owners Laurence Day and Dillon Kellar, according to the above Bloomberg article.

根據上述彭博伯格格（Bloomberg）的文章，他被索引金融提供了索引財務後，為了換取Medjedovic將加密貨幣交給他們，據稱他拒絕了這一點，而是嘲笑了索引索引的財務所有者Laurence Day和Dillon Kellar。

In Laurence Day's reported email to Medjedovic back in 2021, Day implored him to give back the money, ending his email with "You can now choose what difficulty you want to play this game on. Easy mode or Dark Souls".

在勞倫斯·戴（Laurence Day）在2021年向梅德吉多維奇（Medjedovic）的電子郵件中報導的電子郵件中，Day懇求他回饋這筆錢，結束了他的電子郵件，並以“您現在可以選擇要在遊戲上玩此遊戲的困難。輕鬆模式或黑暗的靈魂”。

In a recent tweet recounting the email, Day says:

戴在最近的一條推文中敘述了電子郵件，戴說：

"It didn't have to be this way, but you wanted Dark Souls

“不必這樣，但是你想要黑暗的靈魂

:)"

:)”

I warned you in 2021, Medjedovic

我在2021年警告您，Medjedovic

It didn't have to be this way, but you wanted Dark Souls:)

不必這樣，但是您想要黑暗的靈魂:)

pic.twitter.com/lWMW1IHOGS

pic.twitter.com/lwmw1ihogs

— Laurence Day (@day__lauren) February 3, 2025

- 勞倫斯·戴（Laurence Day）（@day__lauren）2025年2月3日

Medjedovic is alleged to have successfully completed this hack at just 18 years old. And how they were allegedly discovered is a papertrail of various accounts across the web. It starts with Day suspected a someone that had recently collaborated with the Indexed Finance and they had spoken to over Discord, under the username 'UmbralUpsilon'. Indexed Finance then linked the attacker's Ethereum wallet to another wallet filled with winnings earned in a recent hacking contest, also under the username 'UmbralUpsilon'. This connected to an email address, which was associated with a domain for a school board in Canada, which was similar to a Wikipedia account, which was similar to another on Github. A name added to a Wikipedia page for a Canadian quiz by this account gave them the name "Andean Medjedovic, notable mathematician."

據稱，梅德吉多維奇（Medjedovic）在18歲時已經成功完成了這一黑客。據稱他們是如何發現它們的紙質造紙，這些紙質涉及整個網絡上的各種帳戶。首先是Day懷疑一個最近與索引金融合作的人，他們在用戶名“ Umbralupsilon”下與Excord Cordord進行了交談。然後，索引金融將攻擊者的以太坊錢包與另一個裝滿獎金的錢包聯繫在一起，這些錢包在最近的黑客競賽中獲得的獎金，也是在用戶名“ Umbralupsilon”下。這與一個電子郵件地址相關，該電子郵件地址與加拿大學校董事會的域名相關聯，該域類似於Wikipedia帳戶，該帳戶與Github上的另一個類似。通過此帳戶為加拿大測驗的Wikipedia頁面上添加了一個名稱，給了他們“ Andean Medjedovic，著名的數學家”的名字。

It's claimed by Dan that the security work did not play a part in the hack itself.

丹聲稱安全工作沒有在黑客本身中發揮作用。

Despite being on the run from the law since 2021, Medjedovic's alleged hacking of KyberSwap took place in 2023 and accounts for the rest of the $65 million he is accused of stealing.

儘管自2021年以來一直逃離法律，但梅德吉多維奇（Medjedovic）涉嫌黑客攻擊Kyberswap發生在2023年，佔他被指控偷竊的6500萬美元的其餘部分。

Though this process is reportedly similar to that of the 2021 hack, the DoJ's press release claims that Medjedovic had figured out a complex system of trades to "glitch" the pool of tokens, making off with close to $50 million. It also alleges that he tried to launder and conceal the cryptocurrency through a sequence of asset swaps between blockchains.

儘管據報導，這一過程與2021年黑客的過程相似，但司法部的新聞稿聲稱，梅德吉多維奇（Medjedovic）弄清楚了一個複雜的交易體系，以“小故障”“小故障”，以接近5000萬美元的價格賺取。它還指稱他試圖通過區塊鏈之間的一系列資產掉期洗錢和掩蓋加密貨幣。

Medjedovic has reportedly argued he had done nothing other

據報導，梅德吉多（Medjedovic）認為他什麼也沒做