Laptop System Engineer Jailed for Cryptocurrency Exchange Hacks

Laptop system safety engineer Shakeeb Ahmed has been sentenced to several years in prison followed by supervised release for conducting flash loan attacks on the Crypto.com and Nirvana exchanges in 2022, marking the first conviction for hacking a smart contract. Ahmed was ordered to forfeit $12.3 million and pay $5 million in restitution, having laundered the stolen funds through token swaps, foreign cryptocurrency exchanges, and cryptocurrency mixers.

Laptop System Engineer Sentenced for Cryptocurrency Exchange Hacks

On February 28, 2023, Laptop System Safety Engineer Shakeeb Ahmed was sentenced to imprisonment, followed by supervised release, in the Southern District of New York (SDNY) Courtroom for orchestrating flash loan attacks on decentralized cryptocurrency exchanges Crypto Commerce and Nirvana in 2022.

U.S. Attorney Damian Williams stated in an announcement that Ahmed's conviction marks the first instance of a criminal prosecution for hacking a smart contract. As part of his sentencing, Ahmed was ordered to forfeit $12.3 million as well as a substantial quantity of cryptocurrency; he was also directed to pay $5 million in restitution to the victimized exchanges.

According to the evidence presented in court, Ahmed offered to return all the assets stolen from Crypto Commerce, except for $1.5 million, on the condition that the exchange refrain from reporting the incident to law enforcement. Although Nirvana offered Ahmed $600,000 to retrieve their stolen assets, Ahmed demanded $1.4 million out of the $3.6 million he had hacked, resulting in a failed negotiation.

The hacks resulted in significant financial and reputational damage to the affected exchanges. Nirvana's stablecoin, NIRV, depegged from the U.S. dollar, and its native ANA coin plummeted by 85% shortly after news of the breach became public. Subsequently, Nirvana closed its operations.

The SDNY statement revealed that Ahmed engaged in money laundering activities to conceal the illicitly obtained funds:

"Utilizing token-swap transactions 'bridging' fraud proceeds from the Solana blockchain around to the Ethereum blockchain exchanging fraud proceeds into Monero […] using foreign cryptocurrency exchanges and utilizing cryptocurrency mixers, such as Samourai Whirlpool."

Investigators identified a third exchange, Crema, as a potential target of an attack in July 2022 using similar tactics, but federal charges against Ahmed did not connect him to this incident.

At the time of the attacks, Ahmed was employed as "a senior security engineer for an international technology company," according to the statement. Bloomberg reported that Ahmed had previously served as the technical lead of Amazon's bug bounty program.

Inner City Press reported that Ahmed, who had been released on bail, is now working for a mental health therapy startup. The publication quoted Ahmed as saying, "I witnessed hacks, I figured out a way to exploit an exchange's smart contracts. I went into therapy" at the time of his apprehension.

Ahmed was initially arrested in New York in July 2022 and charged with wire fraud and money laundering in connection with the hacks. He subsequently pleaded guilty to a single count of computer fraud in December 2022.

This case highlights the growing threat posed by cybercriminals targeting decentralized cryptocurrency exchanges and the need for robust security measures to safeguard digital assets. It also demonstrates the determination of law enforcement agencies to pursue and prosecute individuals involved in such illicit activities.