笔记本电脑系统工程师因加密货币交易黑客行为被判入狱

笔记本电脑系统安全工程师 Shakeeb Ahmed 因 2022 年对 Crypto.com 和 Nirvana 交易所进行闪贷攻击而被判处几年监禁，随后被监管释放，这是首次因黑客攻击智能合约而被定罪。艾哈迈德因通过代币互换、外国加密货币交易所和加密货币混合器洗钱被盗资金，被责令没收 1230 万美元并赔偿 500 万美元。

Laptop System Engineer Sentenced for Cryptocurrency Exchange Hacks

笔记本电脑系统工程师因加密货币交易黑客行为被判刑

On February 28, 2023, Laptop System Safety Engineer Shakeeb Ahmed was sentenced to imprisonment, followed by supervised release, in the Southern District of New York (SDNY) Courtroom for orchestrating flash loan attacks on decentralized cryptocurrency exchanges Crypto Commerce and Nirvana in 2022.

2023 年 2 月 28 日，笔记本电脑系统安全工程师 Shakeeb Ahmed 在纽约南区 (SDNY) 法庭被判处监禁，随后被监管释放，罪名是在 2022 年策划针对去中心化加密货币交易所 Crypto Commerce 和 Nirvana 的闪贷攻击。

U.S. Attorney Damian Williams stated in an announcement that Ahmed's conviction marks the first instance of a criminal prosecution for hacking a smart contract. As part of his sentencing, Ahmed was ordered to forfeit $12.3 million as well as a substantial quantity of cryptocurrency; he was also directed to pay $5 million in restitution to the victimized exchanges.

美国检察官达米安·威廉姆斯 (Damian Williams) 在一份声明中表示，艾哈迈德的定罪标志着针对黑客智能合约的首次刑事起诉。作为判决的一部分，艾哈迈德被责令没收 1230 万美元以及大量加密货币；他还被指示向受害交易所支付 500 万美元的赔偿金。

According to the evidence presented in court, Ahmed offered to return all the assets stolen from Crypto Commerce, except for $1.5 million, on the condition that the exchange refrain from reporting the incident to law enforcement. Although Nirvana offered Ahmed $600,000 to retrieve their stolen assets, Ahmed demanded $1.4 million out of the $3.6 million he had hacked, resulting in a failed negotiation.

根据法庭上提供的证据，艾哈迈德提出归还从 Crypto Commerce 被盗的所有资产（150 万美元除外），条件是交易所不要向执法部门报告这一事件。尽管 Nirvana 向艾哈迈德提出 60 万美元以取回被盗资产，但艾哈迈德却要求从他窃取的 360 万美元中提取 140 万美元，导致谈判失败。

The hacks resulted in significant financial and reputational damage to the affected exchanges. Nirvana's stablecoin, NIRV, depegged from the U.S. dollar, and its native ANA coin plummeted by 85% shortly after news of the breach became public. Subsequently, Nirvana closed its operations.

这些黑客攻击给受影响的交易所造成了重大的财务和声誉损失。 Nirvana 的稳定币 NIRV 与美元脱钩，其原生 ANA 代币在违规消息曝光后不久就暴跌 85%。随后，Nirvana 关闭了其业务。

The SDNY statement revealed that Ahmed engaged in money laundering activities to conceal the illicitly obtained funds:

SDNY 声明透露，艾哈迈德从事洗钱活动，以隐瞒非法所得资金：

"Utilizing token-swap transactions 'bridging' fraud proceeds from the Solana blockchain around to the Ethereum blockchain exchanging fraud proceeds into Monero […] using foreign cryptocurrency exchanges and utilizing cryptocurrency mixers, such as Samourai Whirlpool."

“利用代币交换交易‘桥接’从 Solana 区块链到以太坊区块链的欺诈收益，将欺诈收益兑换成门罗币 [...] 使用外国加密货币交易所并利用 Samourai Whirlpool 等加密货币混合器。”

Investigators identified a third exchange, Crema, as a potential target of an attack in July 2022 using similar tactics, but federal charges against Ahmed did not connect him to this incident.

调查人员将第三个交易所 Crema 确定为 2022 年 7 月使用类似策略进行攻击的潜在目标，但对 Ahmed 的联邦指控并未将他与此事件联系起来。

At the time of the attacks, Ahmed was employed as "a senior security engineer for an international technology company," according to the statement. Bloomberg reported that Ahmed had previously served as the technical lead of Amazon's bug bounty program.

声明称，袭击发生时，艾哈迈德受聘为“一家国际科技公司的高级安全工程师”。彭博社报道称，艾哈迈德此前曾担任亚马逊漏洞赏金计划的技术负责人。

Inner City Press reported that Ahmed, who had been released on bail, is now working for a mental health therapy startup. The publication quoted Ahmed as saying, "I witnessed hacks, I figured out a way to exploit an exchange's smart contracts. I went into therapy" at the time of his apprehension.

内城出版社报道称，已获保释的艾哈迈德目前正在一家心理健康治疗初创公司工作。该出版物援引艾哈迈德的话说，“我目睹了黑客攻击，我找到了一种利用交易所智能合约的方法。在他被捕时，我接受了治疗”。

Ahmed was initially arrested in New York in July 2022 and charged with wire fraud and money laundering in connection with the hacks. He subsequently pleaded guilty to a single count of computer fraud in December 2022.

艾哈迈德最初于 2022 年 7 月在纽约被捕，并被指控犯有与黑客攻击有关的电信欺诈和洗钱罪。随后，他于 2022 年 12 月承认了一项计算机欺诈罪。

This case highlights the growing threat posed by cybercriminals targeting decentralized cryptocurrency exchanges and the need for robust security measures to safeguard digital assets. It also demonstrates the determination of law enforcement agencies to pursue and prosecute individuals involved in such illicit activities.

此案凸显了针对去中心化加密货币交易所的网络犯罪分子所构成的日益严重的威胁，以及采取强有力的安全措施来保护数字资产的必要性。它还表明执法机构追查和起诉参与此类非法活动的个人的决心。