美国：前安全工程师因加密货币黑客攻击价值 1200 万美元而在具有里程碑意义的起诉中被判入狱

前安全工程师 Shakeeb Ahmed 因利用去中心化加密货币交易所智能合约中的漏洞窃取超过 1200 万美元的加密货币而被判处三年监禁。这一定罪标志着美国有史以来第一起智能合约黑客定罪。

Former Security Engineer Exploits Crypto Vulnerabilities, Sentenced for $12 Million Hacks

前安全工程师利用加密货币漏洞，因黑客攻击 1200 万美元而被判刑

Byline: News Desk

署名：新闻台

New York, USA - Former security engineer Shakeeb Ahmed, found culpable for orchestrating a series of hacks targeting two decentralized cryptocurrency exchanges (DEXs) and pilfering over $12 million worth of crypto, has been sentenced to three years in prison. This groundbreaking conviction marks the first-ever instance of a successful prosecution for smart contract hacking in the United States.

美国纽约 - 前安全工程师 Shakeeb Ahmed 因策划一系列针对两家去中心化加密货币交易所 (DEX) 的黑客攻击并窃取价值超过 1200 万美元的加密货币而被判处三年监禁。这一开创性的定罪标志着美国首次成功起诉智能合约黑客行为。

Inculpatory Evidence

无罪证据

As per court documents, Ahmed launched two distinct attacks on DEXs. On July 2-3, 2022, he manipulated fake pricing data to generate inflated fees of approximately $9 million, which he promptly withdrew in cryptocurrency. Subsequent to the theft, Ahmed reached out to the targeted exchange, offering to reimburse the stolen funds, less $1.5 million, on the condition that the exchange refrain from involving law enforcement.

根据法庭文件，艾哈迈德对 DEX 发起了两次不同的攻击。 2022 年 7 月 2 日至 3 日，他操纵虚假定价数据，产生约 900 万美元的虚增费用，并立即以加密货币形式提取。盗窃事件发生后，艾哈迈德联系了目标交易所，提出赔偿被盗资金，减去 150 万美元，条件是交易所不要涉及执法部门。

On July 28, 2022, Ahmed set his sights on another decentralized exchange, Nirvana Finance. Exploiting a vulnerability in Nirvana's smart contracts, he purchased crypto assets at artificially low prices and swiftly resold them back to Nirvana at inflated prices. Despite Nirvana offering a substantial "bug bounty" of up to $600,000 for the return of the stolen funds, Ahmed demanded an exorbitant $1.4 million. Ahmed's actions precipitated the collapse of the exchange, which lost its entire inventory of funds, estimated at $3.6 million.

2022 年 7 月 28 日，Ahmed 将目光投向了另一家去中心化交易所 Nirvana Finance。他利用 Nirvana 智能合约中的漏洞，以人为低价购买加密资产，并迅速以高价将其转售回 Nirvana。尽管 Nirvana 提供高达 60 万美元的“漏洞赏金”来返还被盗资金，但艾哈迈德却要求 140 万美元。艾哈迈德的行为加速了该交易所的崩溃，该交易所损失了全部资金库存，估计达 360 万美元。

Unraveling the Cybercriminal

揭开网络犯罪分子的面纱

The investigation unveiled that Ahmed employed sophisticated money laundering techniques to obfuscate the origin and ownership of the stolen funds. These tactics included token swap transactions, bridging assets between the Solana (SOL) and Ethereum (ETH) blockchains, converting funds to Monero, and leveraging overseas exchanges and cryptocurrency mixers such as Samourai Whirlpool.

调查显示，艾哈迈德采用复杂的洗钱技术来混淆被盗资金的来源和所有权。这些策略包括代币互换交易、在 Solana (SOL) 和以太坊 (ETH) 区块链之间桥接资产、将资金转换为门罗币，以及利用海外交易所和 Samourai Whirlpool 等加密货币混合器。

Ahmed, a U.S. citizen, held a senior security engineer position at a multinational technology firm at the time of the attacks. His professional credentials attested to his expertise in reverse engineering smart contracts and conducting blockchain audits, skills he brazenly leveraged to perpetrate the hacks.

艾哈迈德是美国公民，袭击发生时在一家跨国科技公司担任高级安全工程师。他的专业资历证明了他在逆向工程智能合约和进行区块链审计方面的专业知识，他厚颜无耻地利用这些技能来实施黑客攻击。

Consequences of Cybercrimes

网络犯罪的后果

Along with the three-year prison sentence, Ahmed has been ordered to serve three years of supervised release. Moreover, he must forfeit approximately $12.3 million, encompassing a substantial amount of cryptocurrency, and compensate the affected exchanges in excess of $5 million.

除了被判处三年监禁外，艾哈迈德还被勒令服刑三年。此外，他必须没收约 1230 万美元，其中包括大量加密货币，并对受影响的交易所进行超过 500 万美元的赔偿。

Commenting on the groundbreaking verdict, U.S. Attorney Damian Williams emphasized, "Today, Shakeeb Ahmed has been sentenced to prison in the first-ever conviction for the hack of a smart contract and ordered to forfeit all of the stolen crypto. No matter how novel or intricate the hack, this Office and our law enforcement allies are unwavering in our commitment to pursuing the stolen funds and ensuring that hackers face justice. And as today's sentence exemplifies, imprisonment and forfeiture of all stolen crypto are the inevitable repercussions of such nefarious acts."

美国检察官达米安·威廉姆斯 (Damian Williams) 在评论这一开创性判决时强调，“今天，沙基布·艾哈迈德 (Shakeeb Ahmed) 首次因黑客智能合约被定罪而被判入狱，并被勒令没收所有被盗的加密货币。无论多么新颖或多么新颖，为了使黑客行为错综复杂，本办公室和我们的执法盟友坚定不移地致力于追查被盗资金并确保黑客受到正义的审判。正如今天的判决所表明的那样，监禁和没收所有被盗加密货币是此类邪恶行为不可避免的后果。 ”

Implications

影响

The prosecution of Ahmed serves as a stark reminder of the evolving nature of cybercrimes and the growing sophistication employed by cybercriminals. As decentralized financial ecosystems continue to expand, so too does the need for robust security measures and vigilance against malicious actors seeking to exploit vulnerabilities. This verdict underscores the resolve of law enforcement agencies to combat these emerging threats and hold accountable those who perpetrate them.

对艾哈迈德的起诉清楚地提醒人们，网络犯罪的性质不断变化，网络犯罪分子的手段也日益复杂。随着去中心化金融生态系统的不断扩大，对强有力的安全措施和对试图利用漏洞的恶意行为者保持警惕的需求也随之增加。这一判决强调了执法机构打击这些新威胁并追究肇事者责任的决心。