美國具有里程碑意義的裁決：前安全工程師因智慧合約駭客行為被判入獄

Shakeeb Ahmed 是一名前安全工程師，他策劃對兩個去中心化加密貨幣交易所進行駭客攻擊，導致價值超過 1,200 萬美元的加密貨幣被盜，被判處三年監禁。這標誌著美國有史以來首次對智慧合約駭客行為定罪，凸顯了在快速發展的數位資產領域解決網路威脅的迫切性。艾哈邁德的行為凸顯了網路犯罪分子的複雜性以及加強安全措施以保護蓬勃發展的加密產業的必要性。

U.S. Courts Issue Landmark Ruling in Smart Contract Hacking Case: Former Security Engineer Sentenced to Prison

美國法院對智能合約駭客案件做出里程碑裁決：前安全工程師被判入獄

In a groundbreaking development for the cryptocurrency industry, the United States District Court for the Southern District of New York has handed down a three-year prison sentence to Shakeeb Ahmed, a former security engineer, for his role in orchestrating a series of hacks on two decentralized cryptocurrency exchanges (DEXs). This marks the first-ever conviction in the United States for smart contract hacking, a sophisticated form of cybercrime targeting the underlying code that governs decentralized blockchain applications.

加密貨幣行業的一項突破性進展是，美國紐約南區地方法院對前安全工程師 Shakeeb Ahmed 判處三年監禁，罪名是他策劃了一系列針對兩個人的黑客攻擊。 DEX）。這標誌著美國首次對智慧合約駭客行為定罪，這是一種複雜的網路犯罪形式，針對的是管理去中心化區塊鏈應用程式的底層程式碼。

Ahmed's hacks resulted in the theft of cryptocurrencies worth more than $12 million, including $9 million from the first attack and $3.6 million from the second. The initial attack, targeting an unnamed exchange, involved manipulating fake pricing data to generate inflated fees, which Ahmed subsequently withdrew in the form of cryptocurrency.

艾哈邁德的駭客攻擊導致價值超過 1,200 萬美元的加密貨幣被盜，其中第一次攻擊造成 900 萬美元，第二次攻擊造成 360 萬美元。最初的攻擊針對的是一家未命名的交易所，涉及操縱虛假定價資料以產生虛高的費用，艾哈邁德隨後以加密貨幣的形式撤回了這些費用。

Following the first theft, Ahmed engaged in communication with the exchange, offering to return a portion of the stolen funds – approximately $10.5 million – if the exchange refrained from involving law enforcement. However, his demands were not met.

第一次盜竊發生後，艾哈邁德與交易所進行了溝通，表示如果交易所不介入執法，他將退還部分被盜資金（約 1050 萬美元）。然而，他的要求並沒有得到滿足。

Undeterred, Ahmed targeted another DEX, Nirvana Finance, on July 28, 2022. Exploiting a vulnerability in Nirvana's smart contracts, he purchased crypto assets at a discounted price and resold them back to the platform at a higher price, resulting in significant financial losses for the exchange.

艾哈邁德沒有被嚇倒，他於2022 年7 月28 日瞄準了另一家DEX Nirvana Finance。利用Nirvana 智能合約中的漏洞，他以折扣價購買了加密資產，並以更高的價格轉售回平台，導致該平台遭受重大財務損失。

Despite Nirvana offering a substantial "bug bounty" of up to $600,000 for the return of the stolen funds, Ahmed demanded $1.4 million. This led to the collapse of the exchange, which had lost all its possessed funds due to Ahmed's attack.

儘管 Nirvana 提供高達 60 萬美元的「漏洞賞金」來返還被盜資金，但艾哈邁德要求 140 萬美元。這導致交易所崩潰，由於艾哈邁德的襲擊，交易所失去了所有擁有的資金。

The investigation into Ahmed's activities revealed that he employed sophisticated money laundering techniques to conceal the source and ownership of the stolen funds. These techniques included token swap transactions, transferring proceeds from the Solana (SOL) blockchain to the Ethereum (ETH) blockchain through "bridging," converting the funds to Monero, and utilizing overseas exchanges and cryptocurrency mixers such as Samourai Whirlpool.

對艾哈邁德活動的調查顯示，他採用複雜的洗錢技術來隱藏被盜資金的來源和所有權。這些技術包括代幣互換交易、透過「橋接」將收益從Solana (SOL) 區塊鏈轉移到以太坊(ETH) 區塊鏈、將資金轉換為門羅幣，以及利用海外交易所和Samourai Whirlpool等加密貨幣混合器。

Ahmed, a U.S. citizen, held a senior security engineer position at an international technology company at the time of the attacks. His expertise in reverse engineering smart contracts and conducting blockchain audits enabled him to execute the hacks with precision.

艾哈邁德是美國公民，攻擊發生時在國際科技公司擔任高級安全工程師。他在逆向工程智慧合約和進行區塊鏈審計方面的專業知識使他能夠精確地執行駭客攻擊。

In addition to the prison sentence, Ahmed has been ordered to forfeit approximately $12.3 million, including a substantial amount of cryptocurrency, and pay the affected exchanges over $5 million in restitution.

除了監禁之外，艾哈邁德還被命令沒收約 1,230 萬美元，其中包括大量加密貨幣，並向受影響的交易所支付超過 500 萬美元的賠償金。

U.S. Attorney Damian Williams, commenting on the landmark ruling, emphasized the commitment of the justice system in pursuing such cases and the consequences that await cybercriminals. "Today, Shakeeb Ahmed was sentenced to prison in the first-ever conviction for the hack of a smart contract and ordered to forfeit all of the stolen crypto. No matter how novel or sophisticated the hack, this Office and our law enforcement partners are committed to following the money and bringing hackers to justice. And as today's sentence shows, time in prison — and forfeiture of all the stolen crypto — is the inevitable consequence of such destructive hacks."

美國檢察官達米安威廉斯 (Damian Williams) 在評論這項具有里程碑意義的裁決時強調，司法系統致力於追蹤此類案件，並強調網路犯罪分子將面​​臨的後果。 「今天，沙基布·艾哈邁德(Shakeeb Ahmed) 首次因智能合約黑客攻擊被判入獄，並被勒令沒收所有被盜的加密貨幣。無論黑客攻擊多麼新穎或複雜，本辦公室和我們的執法合作夥伴都致力於追蹤金錢並將駭客繩之以法。正如今天的判決所表明的那樣，入獄並沒收所有被盜的加密貨幣是此類破壞性駭客的不可避免的後果。”

The landmark sentencing of Shakeeb Ahmed sends a clear message that smart contract hacking will not be tolerated and that perpetrators will face serious consequences. This verdict is a significant step towards safeguarding the integrity and security of the cryptocurrency industry and protecting investors from cybercrime.

Shakeeb Ahmed 具有里程碑意義的判決發出了一個明確的訊息：智慧合約駭客行為是不會被容忍的，肇事者將面臨嚴重後果。這項判決是維護加密貨幣產業完整性和安全以及保護投資者免受網路犯罪的重要一步。