美國：前安全工程師因加密貨幣駭客攻擊價值 1200 萬美元而在具有里程碑意義的起訴中被判入獄

前安全工程師 Shakeeb Ahmed 因利用去中心化加密貨幣交易所智慧合約中的漏洞竊取超過 1,200 萬美元的加密貨幣而被判處三年監禁。這一定罪標誌著美國有史以來第一起智能合約駭客定罪。

Former Security Engineer Exploits Crypto Vulnerabilities, Sentenced for $12 Million Hacks

前安全工程師利用加密貨幣漏洞，因駭客攻擊 1,200 萬美元而被判刑

Byline: News Desk

署名：新聞台

New York, USA - Former security engineer Shakeeb Ahmed, found culpable for orchestrating a series of hacks targeting two decentralized cryptocurrency exchanges (DEXs) and pilfering over $12 million worth of crypto, has been sentenced to three years in prison. This groundbreaking conviction marks the first-ever instance of a successful prosecution for smart contract hacking in the United States.

美國紐約 - 前安全工程師 Shakeeb Ahmed 因策劃一系列針對兩家去中心化加密貨幣交易所 (DEX) 的駭客攻擊並竊取價值超過 1200 萬美元的加密貨幣而被判處三年監禁。這項開創性的定罪標誌著美國首次成功起訴智能合約駭客行為。

Inculpatory Evidence

無罪證據

As per court documents, Ahmed launched two distinct attacks on DEXs. On July 2-3, 2022, he manipulated fake pricing data to generate inflated fees of approximately $9 million, which he promptly withdrew in cryptocurrency. Subsequent to the theft, Ahmed reached out to the targeted exchange, offering to reimburse the stolen funds, less $1.5 million, on the condition that the exchange refrain from involving law enforcement.

根據法庭文件，艾哈邁德對 DEX 發動了兩次不同的攻擊。 2022 年 7 月 2 日至 3 日，他操縱虛假定價數據，產生約 900 萬美元的虛增費用，並立即以加密貨幣形式提取。竊盜事件發生後，艾哈邁德聯繫了目標交易所，提出賠償被盜資金，減去 150 萬美元，條件是交易所不要涉及執法部門。

On July 28, 2022, Ahmed set his sights on another decentralized exchange, Nirvana Finance. Exploiting a vulnerability in Nirvana's smart contracts, he purchased crypto assets at artificially low prices and swiftly resold them back to Nirvana at inflated prices. Despite Nirvana offering a substantial "bug bounty" of up to $600,000 for the return of the stolen funds, Ahmed demanded an exorbitant $1.4 million. Ahmed's actions precipitated the collapse of the exchange, which lost its entire inventory of funds, estimated at $3.6 million.

2022 年 7 月 28 日，Ahmed 將目光投向了另一家去中心化交易所 Nirvana Finance。他利用 Nirvana 智能合約中的漏洞，以人為低價購買加密資產，並迅速以高價將其轉售回 Nirvana。儘管 Nirvana 提供高達 60 萬美元的「漏洞賞金」來返還被盜資金，但艾哈邁德要求 140 萬美元。艾哈邁德的行為加速了交易所的崩潰，該交易所損失了全部資金庫存，估計達 360 萬美元。

Unraveling the Cybercriminal

揭開網路犯罪分子的面紗

The investigation unveiled that Ahmed employed sophisticated money laundering techniques to obfuscate the origin and ownership of the stolen funds. These tactics included token swap transactions, bridging assets between the Solana (SOL) and Ethereum (ETH) blockchains, converting funds to Monero, and leveraging overseas exchanges and cryptocurrency mixers such as Samourai Whirlpool.

調查顯示，艾哈邁德採用複雜的洗錢技術來混淆被盜資金的來源和所有權。這些策略包括代幣互換交易、在 Solana (SOL) 和以太坊 (ETH) 區塊鏈之間橋接資產、將資金轉換為門羅幣，以及利用海外交易所和 Samourai Whirlpool 等加密貨幣混合器。

Ahmed, a U.S. citizen, held a senior security engineer position at a multinational technology firm at the time of the attacks. His professional credentials attested to his expertise in reverse engineering smart contracts and conducting blockchain audits, skills he brazenly leveraged to perpetrate the hacks.

艾哈邁德是美國公民，攻擊發生時在一家跨國科技公司擔任高級安全工程師。他的專業資歷證明了他在逆向工程智慧合約和進行區塊鏈審計方面的專業知識，他厚顏無恥地利用這些技能來實施駭客攻擊。

Consequences of Cybercrimes

網路犯罪的後果

Along with the three-year prison sentence, Ahmed has been ordered to serve three years of supervised release. Moreover, he must forfeit approximately $12.3 million, encompassing a substantial amount of cryptocurrency, and compensate the affected exchanges in excess of $5 million.

除了被判處三年監禁外，艾哈邁德還被勒令服刑三年。此外，他必須沒收約 1,230 萬美元，其中包括大量加密貨幣，並對受影響的交易所進行超過 500 萬美元的賠償。

Commenting on the groundbreaking verdict, U.S. Attorney Damian Williams emphasized, "Today, Shakeeb Ahmed has been sentenced to prison in the first-ever conviction for the hack of a smart contract and ordered to forfeit all of the stolen crypto. No matter how novel or intricate the hack, this Office and our law enforcement allies are unwavering in our commitment to pursuing the stolen funds and ensuring that hackers face justice. And as today's sentence exemplifies, imprisonment and forfeiture of all stolen crypto are the inevitable repercussions of such nefarious acts."

美國檢察官達米安威廉斯(Damian Williams) 在評論這一開創性判決時強調，「今天，沙基布艾哈邁德(Shakeeb Ahmed) 首次因黑客智能合約被定罪而被判入獄，並被勒令沒收所有被盜的加密貨幣。 。正如今天的判決所表明的那樣，監禁和沒收所有被盜加密貨幣是此類邪惡行為不可避免的後果。 ”

Implications

影響

The prosecution of Ahmed serves as a stark reminder of the evolving nature of cybercrimes and the growing sophistication employed by cybercriminals. As decentralized financial ecosystems continue to expand, so too does the need for robust security measures and vigilance against malicious actors seeking to exploit vulnerabilities. This verdict underscores the resolve of law enforcement agencies to combat these emerging threats and hold accountable those who perpetrate them.

對艾哈邁德的起訴清楚地提醒人們，網路犯罪的性質不斷變化，網路犯罪分子的手段也日益複雜。隨著去中心化金融生態系統的不斷擴大，對強有力的安全措施和對試圖利用漏洞的惡意行為者保持警惕的需求也隨之增加。這項判決強調了執法機構打擊這些新威脅並追究肇事者責任的決心。