Historic Conviction for Smart Contract Hack
Shakeeb Ahmed, previously a senior security engineer, has admitted guilt for pioneering a smart contract hack. His guilty plea, regarding attacks on two decentralized crypto exchanges including Nirvana Finance, was entered before U.S. Magistrate Judge Ona T. Wang. Ahmed's admission involves forfeiting over $12.3 million, $5.6 million of which is in cryptocurrency obtained fraudulently.
U.S. Attorney Damian Williams, representing the Southern District of New York, highlighted the significance of this plea. It marks a critical development in combating cybercrimes within decentralized finance (DeFi).
Ingenious Hacking Tactics Unraveled
In July 2022, Ahmed breached two decentralized crypto exchanges. He first manipulated a smart contract on an unnamed exchange, creating about $9 million in inflated fees. He negotiated to keep $1.5 million while returning the rest, contingent on the exchange's silence regarding the attack.
His second breach targeted Nirvana Finance, where he exploited a flash loan for an estimated $10 million. By manipulating the ANA token's price, Ahmed profited by around $3.6 million. This act drained Nirvana's resources, leading to its closure.
Advanced Laundering Techniques Exposed
Post-hack, Ahmed's laundering methods included token swaps, bridging assets across blockchains, and converting assets to Monero, known for its anonymity. His online activities indicated an awareness of potential criminal implications, with searches related to DeFi hacks and strategies to evade U.S. law.
Upcoming Sentencing and Commendations
Ahmed, 34, from New York, faces a maximum of five years in prison and over $5 million in restitution. His sentencing is set for March 13, 2024. U.S. Attorney Williams acknowledged the efforts of Homeland Security Investigations, the Internal Revenue Service – Criminal Investigation, and the U.S. Attorney’s Office for the Southern District of California.
The case, led by the Money Laundering & Transnational Criminal Enterprises Unit and the Complex Frauds & Cybercrime Unit, sets a precedent in addressing cybercrimes in DeFi.
Ahmed's conviction in this groundbreaking DeFi cybersecurity case underlines the legal system's growing adeptness in handling sophisticated digital financial crimes. His guilty plea serves as a stark deterrent in the realm of cybercrime.
While this conviction marks progress, it also underscores the persistent vulnerability of decentralized finance to sophisticated cybercrimes.