Cryptonews Blockchain News

Inside Job: Security Engineer Behind Multi-Million Dollar Crypto Exploits

DEX

Exchange

Author

Fredrik Vold

Author

Fredrik Vold

Author Profile

Last updated:

December 14, 2023

Why Trust Cryptonews

Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews

Computer hacker — Source: Adobe / Rawpixel.com

Shakeeb Ahmed, a senior security engineer associated with an international technology company, pleaded guilty on December 14 to computer fraud in connection with his hacking of two decentralized crypto exchanges.

The announcement of the guilty plea was made by Damian Williams, the United States Attorney for the Southern District of New York, on Thursday this week.

Ahmed’s guilty plea is noteworthy as it marks the first-ever conviction for hacking a smart contract.

The charges relate to the July 2022 hacks on two exchanges, one of which was simple referred to as the “crypto exchange,” and the other a part of the decentralized finance (DeFi) protocol Nirvana Finance.

Former security engineer for international technology company pleads guilty to hacking two decentralized cryptocurrency exchangeshttps://t.co/KPciTKIRNB

— US Attorney SDNY (@SDNYnews) December 14, 2023

At the time of the attacks, Ahmed, a 34-year-old US citizen, served as a senior security engineer and possessed specialized skills in reverse engineering smart contracts and conducting blockchain audits, the prosecutor said in the announcement.

Crypto exchange hack

The crypto exchange allowed users to trade various cryptocurrencies and rewarded users for providing liquidity.

Ahmed exploited a vulnerability in the exchange’s smart contracts, leading to the fraudulent generation of approximately $9 million in trading fees.

Following the theft, Ahmed entered into discussions with the exchange, agreeing to return most of the stolen funds if the exchange did not contact the police.

Nirvana Finance attack

In another attack, Ahmed targeted Nirvana Finance in July 2022.

Using a so-called flash loan, he secured approximately $10 million, manipulated Nirvana’s smart contracts, and profited around $3.6 million.

Despite Nirvana’s offer of a “bug bounty,” Ahmed demanded $1.4 million, resulting in the closure of Nirvana after he retained all stolen funds.

After the attacks, Ahmed employed intricate laundering techniques, including token-swap transactions, bridging fraud proceeds between blockchains, and converting funds into the privacy coin Monero (XMR).