美国司法部已针对涉嫌的加密黑客提起诉讼，该公司声称该黑客从18岁开始就偷走了6500万美元的加密货币。

现年22岁的安迪斯·梅杰多维奇（Andean Medjedovic）面临五项指控，与起诉有关。这些指控的重点是据称“从Kyberswap和Indexed Finance Sentrance Fanance（DEFI）协议中窃取了约6500万美元的加密货币”。

The US Department of Justice has filed charges against an alleged crypto hacker, who it claims stole $65 million in cryptocurrency, starting when he was just 18 years old.

美国司法部已针对涉嫌的加密黑客提起诉讼，该公司声称该黑客从18岁开始就偷走了6500万美元的加密货币。

The now 22-year-old Andean Medjedovic faces five charges, linked to an indictment. The focus of these charges is for allegedly "stealing approximately $65 million in cryptocurrency from the KyberSwap and Indexed Finance decentralised finance (DeFi) protocols".

现年22岁的安迪斯·梅杰多维奇（Andean Medjedovic）面临五项指控，与起诉有关。这些指控的重点是据称“从Kyberswap和Indexed Finance Sentrance Fanance（DEFI）协议中窃取了约6500万美元的加密货币”。

The first hack, in relation to Indexed Finance, involved a systemic vulnerability. Effectively, Indexed Finances managed to cut out many of the middle management fees from trades with built-in regulatory systems, and this reduced overhead partially led to its renown. However, that also appeared to be its fault.

与索引金融有关的第一个黑客涉及系统性脆弱性。有效地，索引财务设法从内置监管系统中削减了许多中层管理费，这会降低间接费用，部分导致了它的声望。但是，这似乎也是它的错。

Indexed Finance is monitored with a complex system of checks and balances by adjusting pool prices and liquidity (the cost and size of the digital market that users can purchase) for its crypto funds to incentivise or disincentive users from trading. As pointed out in Bloomberg's investigation of Indexed Finance in 2022, "This model assumed users would interact rationally with the protocol, buying low and selling high".

通过调整泳池价格和流动性（用户可以购买的数字市场的成本和规模），通过复杂的制衡系统来监视索引融资，以激励或阻止用户交易。正如彭博（Bloomberg）在2022年对索引金融的调查中所指出的那样，“该模型假设用户将与协议合理互动，低购买和销售高价互动”。

Medjedovic allegedly exploited this by loaning over $150 million in a 'flash loan' where he borrowed and gave back crypto assets in a single line of programmed transactions. This code would then purchase a vast supply of tokens immediately, artificially pumping their value, where it would then swap that currency for a different one through an action known as "minting". In this same action, another flash loan would be taken to purchase a different token known as Sushi.

据称，Medjedovic通过在“ Flash Loan”中贷款超过1.5亿美元，在那里他借了一笔超过1.5亿美元，并以一系列编程的交易赠送了加密货币资产。然后，该代码将立即购买大量的代币，人为地泵送其价值，然后通过称为“铸造”的动作将该货币交换为不同的货币。在同一动作中，将借另一笔闪光贷款购买另一种名为Sushi的令牌。

That Sushi token would find its way into the pool of currency, which would navigate around restrictions on the amount of tokens that can be introduced. Sushi would then be traded for the original tokens, which are now undervalued.

寿司代币将进入货币库，这将围绕对可以引入的令牌数量的限制进行导航。然后将寿司交易为原始令牌，现在被低估了。

This process is claimed by the DoJ to have finished with Medjedovic burning and minting the supply of tokens to trade $4 million worth of Sushi tokens in $21 million worth of others. The loan is repaid, and he is being accused of cashing out $11.9 million for himself. Interestingly, a key part of this process is that the code gifted the Sushi tokens back to the pool, which isn't something a rational buyer would do, thus explaining how this system got around Indexed Finance's protocols.

司法部声称，这一过程已经完成了Medjedovic燃烧，并铸造了价值400万美元的寿司代币的供应，其中价值2100万美元。贷款是偿还的，他被指控兑现了1,190万美元。有趣的是，此过程的关键部分是，该代码将寿司代币赠予了池，这不是理性买家会做的，从而解释了该系统如何围绕索引融资的协议。

After being offered 10% of the cryptocurrency by Indexed Finance, in exchange for Medjedovic handing the cryptocurrency back to them, he allegedly turned this down and instead taunted Indexed Finance's owners Laurence Day and Dillon Kellar, according to the above Bloomberg article.

根据上述彭博伯格格（Bloomberg）的文章，他被索引金融提供了索引财务后，为了换取Medjedovic将加密货币交给他们，据称他拒绝了这一点，而是嘲笑了索引索引的财务所有者Laurence Day和Dillon Kellar。

In Laurence Day's reported email to Medjedovic back in 2021, Day implored him to give back the money, ending his email with "You can now choose what difficulty you want to play this game on. Easy mode or Dark Souls".

在劳伦斯·戴（Laurence Day）在2021年向梅德吉多维奇（Medjedovic）的电子邮件中报道的电子邮件中，Day恳求他回馈这笔钱，结束了他的电子邮件，并以“您现在可以选择要在游戏上玩此游戏的困难。轻松模式或黑暗的灵魂”。

In a recent tweet recounting the email, Day says:

戴在最近的一条推文中叙述了电子邮件，戴说：

"It didn't have to be this way, but you wanted Dark Souls

“不必这样，但是你想要黑暗的灵魂

:)"

:)”

I warned you in 2021, Medjedovic

我在2021年警告您，Medjedovic

It didn't have to be this way, but you wanted Dark Souls:)

不必这样，但是您想要黑暗的灵魂:)

pic.twitter.com/lWMW1IHOGS

pic.twitter.com/lwmw1ihogs

— Laurence Day (@day__lauren) February 3, 2025

- 劳伦斯·戴（Laurence Day）（@day__lauren）2025年2月3日

Medjedovic is alleged to have successfully completed this hack at just 18 years old. And how they were allegedly discovered is a papertrail of various accounts across the web. It starts with Day suspected a someone that had recently collaborated with the Indexed Finance and they had spoken to over Discord, under the username 'UmbralUpsilon'. Indexed Finance then linked the attacker's Ethereum wallet to another wallet filled with winnings earned in a recent hacking contest, also under the username 'UmbralUpsilon'. This connected to an email address, which was associated with a domain for a school board in Canada, which was similar to a Wikipedia account, which was similar to another on Github. A name added to a Wikipedia page for a Canadian quiz by this account gave them the name "Andean Medjedovic, notable mathematician."

据称，梅德吉多维奇（Medjedovic）在18岁时已经成功完成了这一黑客。据称他们是如何发现它们的纸质造纸，这些纸质涉及整个网络上的各种帐户。首先是Day怀疑一个最近与索引金融合作的人，他们在用户名“ Umbralupsilon”下与Excord Cordord进行了交谈。然后，索引金融将攻击者的以太坊钱包与另一个装满奖金的钱包联系在一起，这些钱包在最近的黑客竞赛中获得的奖金，也是在用户名“ Umbralupsilon”下。这与一个电子邮件地址相关，该电子邮件地址与加拿大学校董事会的域名相关联，该域类似于Wikipedia帐户，该帐户与Github上的另一个类似。通过此帐户为加拿大测验的Wikipedia页面上添加了一个名称，给了他们“ Andean Medjedovic，著名的数学家”的名字。

It's claimed by Dan that the security work did not play a part in the hack itself.

丹声称安全工作没有在黑客本身中发挥作用。

Despite being on the run from the law since 2021, Medjedovic's alleged hacking of KyberSwap took place in 2023 and accounts for the rest of the $65 million he is accused of stealing.

尽管自2021年以来一直逃离法律，但梅德吉多维奇（Medjedovic）涉嫌黑客攻击Kyberswap发生在2023年，占他被指控偷窃的6500万美元的其余部分。

Though this process is reportedly similar to that of the 2021 hack, the DoJ's press release claims that Medjedovic had figured out a complex system of trades to "glitch" the pool of tokens, making off with close to $50 million. It also alleges that he tried to launder and conceal the cryptocurrency through a sequence of asset swaps between blockchains.

尽管据报道，这一过程与2021年黑客的过程相似，但司法部的新闻稿声称，梅德吉多维奇（Medjedovic）弄清楚了一个复杂的交易体系，以“小故障”“小故障”，以接近5000万美元的价格赚取。它还指称他试图通过区块链之间的一系列资产掉期洗钱和掩盖加密货币。

Medjedovic has reportedly argued he had done nothing other

据报道，梅德吉多（Medjedovic）认为他什么也没做