筆記型電腦系統工程師因加密貨幣交易駭客行為被判入獄

筆記型電腦系統安全工程師 Shakeeb Ahmed 因 2022 年對 Crypto.com 和 Nirvana 交易所進行閃貸攻擊而被判處幾年監禁，隨後被監管釋放，這是首次因黑客攻擊智能合約而被定罪。艾哈邁德因透過代幣互換、外國加密貨幣交易所和加密貨幣混合器洗錢被盜資金，被命令沒收 1230 萬美元並賠償 500 萬美元。

Laptop System Engineer Sentenced for Cryptocurrency Exchange Hacks

筆記型電腦系統工程師因加密貨幣交易駭客行為被判刑

On February 28, 2023, Laptop System Safety Engineer Shakeeb Ahmed was sentenced to imprisonment, followed by supervised release, in the Southern District of New York (SDNY) Courtroom for orchestrating flash loan attacks on decentralized cryptocurrency exchanges Crypto Commerce and Nirvana in 2022.

2023 年2 月28 日，筆記型電腦系統安全工程師Shakeeb Ahmed 在紐約南區(SDNY) 法庭被判處監禁，隨後被監管釋放，罪名是在2022 年策劃針對去中心化加密貨幣交易所Crypto Commerce 和Nirvana 的閃貸攻擊。

U.S. Attorney Damian Williams stated in an announcement that Ahmed's conviction marks the first instance of a criminal prosecution for hacking a smart contract. As part of his sentencing, Ahmed was ordered to forfeit $12.3 million as well as a substantial quantity of cryptocurrency; he was also directed to pay $5 million in restitution to the victimized exchanges.

美國檢察官達米安威廉斯 (Damian Williams) 在一份聲明中表示，艾哈邁德的定罪標誌著針對駭客智能合約的首次刑事起訴。作為判決的一部分，艾哈邁德被命令沒收 1,230 萬美元以及大量加密貨幣；他還被指示向受害交易所支付 500 萬美元的賠償金。

According to the evidence presented in court, Ahmed offered to return all the assets stolen from Crypto Commerce, except for $1.5 million, on the condition that the exchange refrain from reporting the incident to law enforcement. Although Nirvana offered Ahmed $600,000 to retrieve their stolen assets, Ahmed demanded $1.4 million out of the $3.6 million he had hacked, resulting in a failed negotiation.

根據法庭上提供的證據，艾哈邁德提出歸還從 Crypto Commerce 被盜的所有資產（150 萬美元除外），條件是交易所不要向執法部門報告這一事件。儘管 Nirvana 向艾哈邁德提出 60 萬美元以取回被盜資產，但艾哈邁德要求從他竊取的 360 萬美元中提取 140 萬美元，導致談判失敗。

The hacks resulted in significant financial and reputational damage to the affected exchanges. Nirvana's stablecoin, NIRV, depegged from the U.S. dollar, and its native ANA coin plummeted by 85% shortly after news of the breach became public. Subsequently, Nirvana closed its operations.

這些駭客攻擊對受影響的交易所造成了重大的財務和聲譽損失。 Nirvana 的穩定幣 NIRV 與美元脫鉤，其原生 ANA 代幣在違規消息曝光後不久就暴跌 85%。隨後，Nirvana 關閉了其業務。

The SDNY statement revealed that Ahmed engaged in money laundering activities to conceal the illicitly obtained funds:

SDNY 聲明透露，艾哈邁德從事洗錢活動，以隱瞞非法所得資金：

"Utilizing token-swap transactions 'bridging' fraud proceeds from the Solana blockchain around to the Ethereum blockchain exchanging fraud proceeds into Monero […] using foreign cryptocurrency exchanges and utilizing cryptocurrency mixers, such as Samourai Whirlpool."

「利用代幣交換交易'橋接'從Solana 區塊鏈到以太坊區塊鏈的欺詐收益，將欺詐收益兌換成門羅幣[...] 使用外國加密貨幣交易所並利用Samourai Whirlpool 等加密貨幣混合器。

Investigators identified a third exchange, Crema, as a potential target of an attack in July 2022 using similar tactics, but federal charges against Ahmed did not connect him to this incident.

調查人員將第三個交易所 Crema 確定為 2022 年 7 月使用類似策略進行攻擊的潛在目標，但對 Ahmed 的聯邦指控並未將他與此事件聯繫起來。

At the time of the attacks, Ahmed was employed as "a senior security engineer for an international technology company," according to the statement. Bloomberg reported that Ahmed had previously served as the technical lead of Amazon's bug bounty program.

聲明稱，襲擊發生時，艾哈邁德受聘為「國際科技公司的高級安全工程師」。彭博社報道稱，艾哈邁德先前曾擔任亞馬遜漏洞賞金計畫的技術負責人。

Inner City Press reported that Ahmed, who had been released on bail, is now working for a mental health therapy startup. The publication quoted Ahmed as saying, "I witnessed hacks, I figured out a way to exploit an exchange's smart contracts. I went into therapy" at the time of his apprehension.

內城出版社報道稱，已獲保釋的艾哈邁德目前正在一家心理健康治療新創公司工作。該出版物引述艾哈邁德的話說，「我目睹了駭客攻擊，我找到了一種利用交易所智能合約的方法。當他被捕時，我接受了治療」。

Ahmed was initially arrested in New York in July 2022 and charged with wire fraud and money laundering in connection with the hacks. He subsequently pleaded guilty to a single count of computer fraud in December 2022.

艾哈邁德最初於 2022 年 7 月在紐約被捕，並被指控犯有與駭客攻擊有關的電信詐欺和洗錢罪。隨後，他於 2022 年 12 月承認了一項電腦詐欺罪。

This case highlights the growing threat posed by cybercriminals targeting decentralized cryptocurrency exchanges and the need for robust security measures to safeguard digital assets. It also demonstrates the determination of law enforcement agencies to pursue and prosecute individuals involved in such illicit activities.

此案凸顯了針對去中心化加密貨幣交易所的網路犯罪分子所構成的日益嚴重的威脅，以及採取強有力的安全措施來保護數位資產的必要性。它還表明執法機構追蹤和起訴參與此類非法活動的個人的決心。