Nirvana Finance hacker pleads guilty, agrees to pay restitution to victims

Quick Take

  • The hacker who stole $12 million from Nirvana Finance and another DEX plead guilty and agreed to forfeit $12.3 million of assets.

Shakeeb Ahmed, a 34-year old senior security engineer, admitted he exploited the Nirvana Finance protocol and another unnamed decentralized cryptocurrency exchange, the U.S. Attorney's Office for the Southern District of New York announced on Thursday. 

Ahmed agreed to forfeit $12.3 million obtained from the two hacks. He also will pay the victims restitution totaling $5 million.

"Five months ago, my office announced the first ever arrest involving an attack on a smart contract," U.S. attorney Damian Williams said in a statement. "That arrest is now the first ever conviction for such a hack."

Two 2022 exploits

Ahmed was charged with wire fraud and money laundering in July. According to the indictment, he exploited a vulnerability in a smart contract of an unnamed Solana-based exchange, which matched the description of Crema Finance, according to reports.

THE SCOOP

Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

A few weeks after the first hack, Ahmed carried out a $3.6 million attack on Nirvana Finance that involved a flash loan and an exploit he discovered in the platform's smart contracts. Nirvana had offered Ahmed a $600,000 bounty in exchange for return of the stolen funds, but he demanded $1.4 million instead, and the parties never reached agreement. 

Ahmed laundered the funds "using sophisticated techniques including token-swap transactions, 'bridging' fraud proceeds from the Solana blockchain over to the Ethereum blockchain, exchanging fraud proceeds into Monero, an anonymized and particularly difficult cryptocurrency to trace, using overseas cryptocurrency exchanges, and using cryptocurrency mixers such as Samourai Whirlpool," according to the statement. 

Ahmed faces a maximum sentence of five years in prison. He is scheduled to be sentenced on March 13.


Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

Anna is a senior policy reporter at The Block. She has a background in political journalism and covered Russian civil society for a range of news outlets in Moscow, including the award-winning newspaper Novaya Gazeta. Before joining The Block, Anna spent the past five years investigating cryptocurrency policies and adoption around the world at CoinDesk. Anna owns bitcoin and a gift NFT of sentimental value.

Editor

To contact the editor of this story:
Nathan Crooks at
[email protected]