Andean Medjedovic
Last changed 2026-11-03 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 23 → 26. Version history →
Why this score
| Every page starts at | 65 |
| The subject's own conduct | -188 |
| Problems around it, caused by others | -2.3 |
| Long-running | +8 |
| Accepted community evidence | -3.4 |
| Sum | -121 |
- No established finding that it defrauded anyone, so it stays out of the red band (26 or above).
Score: 26/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-03 · 4 of 5 claims confirmed · 1 need better sources
anchored·257xn9…DBTVSummary
Andean 'Andy' Medjedovic is a Canadian national and mathematics prodigy charged by U.S. federal prosecutors in February 2025 with allegedly stealing approximately $65 million from two decentralized finance protocols: Indexed Finance in October 2021 (about $16.5 million) and KyberSwap in November 2023 (reported at $48.4 million to $48.9 million). He faces a five-count indictment in the Eastern District of New York for wire fraud, unauthorized damage to a protected computer, attempted Hobbs Act extortion, money laundering conspiracy and money laundering. He has been a fugitive since December 2021, was released by a Serbian court in November 2024 after a Dutch extradition request failed, is believed to be in Bosnia and Herzegovina, has retained Washington D.C. lobbyists to seek a U.S. presidential pardon, and wallets attributed to him moved further funds through Tornado Cash in April 2026.
Connected Entities
14 entities · 60 linked investigations- KyberSwap Elastic→mentioned with→Ethereum(70%)
- KyberSwap Elastic→mentioned with→Polygon(70%)
- KyberSwap Elastic→mentioned with→Optimism(70%)
- Indexed Finance→mentioned with→Ethereum(70%)
- KyberSwap Elastic→mentioned with→Arbitrum(70%)
- KyberSwap Elastic→mentioned with→KyberSwap(80%)
- Indexed Finance→mentioned with→KyberSwap(70%)
- Andean Medjedovic→mentioned with→Ethereum(80%)
- Andean Medjedovic→mentioned with→Optimism(65%)
- Andean Medjedovic→mentioned with→Polygon(65%)
- + 41 more
Community submissions
- https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/(balkaninsight.com)
“[Scout] Balkan Insight reports that Medjedovic remains at large and has hired Washington lobbyists to seek a pardon from President Trump; Serbian authorities released him in November 2024 after 105 days in detention.”
— avoid-scout(unverified)
“[Scout] Bitcoin.com reports that Andean Medjedovic moved 2,900 ETH (about $6.8 million) to Tornado Cash in April 2026 and remains a fugitive with no arrest made.”
— avoid-scout(unverified)
1 submission awaiting moderator review.
Timeline(17 events)
October 2021
Indexed Finance is exploited for approximately $16.5 million through alleged flash-loan manipulation of its re-indexing process; the attack is later attributed to Medjedovic, who publicly acknowledged involvement. Sources give October 14 or October 15.
DOJ Office of Public AffairsOctober 2021
Indexed Finance publicly identifies Medjedovic as the alleged attacker through a trail of online usernames and forum activity.
DL NewsNovember 2021
Ontario Superior Court issues an asset freeze order covering tokens taken in the Indexed Finance exploit (per Canadian Lawyer Magazine, which also places the bench warrant in this period).
Canadian Lawyer MagazineDecember 2021
Cicada 137 LLC files a notice of action in the Ontario Superior Court of Justice, a proposed class action on behalf of Indexed Finance investors.
BlockworksDecember 2021
Ontario court issues a bench warrant for Medjedovic's arrest after he fails to appear; he leaves Canada and becomes a fugitive.
CBC NewsNovember 2023
KyberSwap Elastic is exploited for approximately $48.4 million to $48.9 million across Arbitrum, Optimism, Ethereum, Polygon and Base via a tick-precision liquidity double-counting flaw. Sources give November 22 or November 23.
KyberSwap Post-Mortem BlogNovember 2023
The attacker demands complete control of the KyberSwap protocol and its DAO in exchange for returning 50% of the stolen assets, later charged as attempted Hobbs Act extortion.
DOJ Office of Public AffairsDecember 2023
Dutch authorities issue a European arrest warrant, alleging the KyberSwap exploit was executed from a hotel in The Hague where Medjedovic checked in with a fake Slovak passport.
CBC NewsFebruary 2024
Medjedovic allegedly pays approximately $86,559 to an undercover law enforcement agent for money laundering assistance.
The RecordAugust 2024
Medjedovic is arrested in Belgrade, Serbia, on the Dutch European arrest warrant after arriving under an alias.
CBC NewsNovember 2024
The Higher Court in Belgrade denies the Dutch extradition request and releases Medjedovic after about 105 days in custody.
CBC NewsJanuary 2025
A U.S. DOJ filing states the defendant is 'believed to be at large in Bosnia.'
Balkan InsightFebruary 2025
The DOJ unseals a five-count indictment in the Eastern District of New York covering both exploits, attempted extortion and money laundering, with a combined maximum penalty of 90 years.
DOJ Office of Public AffairsJanuary 2026
Balkan Insight reports that Medjedovic has surfaced in Bosnia and Herzegovina after his release in Serbia.
Balkan InsightFebruary 2026
JM Burkman & Associates files FARA documents disclosing a $300,000 retainer to seek a U.S. presidential pardon for Medjedovic.
CBC NewsMarch 2026
Balkan Insight reports on the pardon lobbying campaign, quoting lobbyist Jacob Wohl describing the exploits as 'standard permissible trades for profit.'
Balkan InsightApril 2026
Wallets attributed to Medjedovic move further ETH through Tornado Cash (reported as 2,900 ETH, about $6.8 million, or about $13.5 million), bringing cumulative mixer flows to about $24.88 million to $25 million. Attribution is not definitively confirmed.
DL NewsDecision Log
- slot 465084659 · hash 7EHiEDsFhKLMeA7XgCMT5Vk8GqDxcqqvuuUpMzkkdAWw
- slot 465084654 · hash DLzjwAvmdtax8iBJpzrjgmgib8yXPEQBKuuwyztY6mWF
- slot 465084648 · hash GVD2CWFMCwcxAe6hoM7PJ2uMRkHHYRBbeLctsqUwQ3Bn
- slot 465080412 · hash DDjEZMoFAyBq9kfu527sRbxBPNXkTPWa7rgXPeztYEvW
- slot 465080053 · hash dfcSytjGXGWz1z6pQZJdFKXNzom5GkgyWqKwZWoAhv1
- slot 455359728 · hash TaVzwsCRbpFuLb1KhocSENcmSWpFABLm7dYAX6qojR2
- slot 429233892 · hash HcdfSHNy7mYC96YBGcemKa9B3JA38dZhi6i4dQ7qEo5K
This investigation is cryptographically anchored to the Solana blockchain (7 decisions). 36 of 36 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 6/27/2026, 12:09:26 PM
last updated: 11/3/2026, 11:32:24 PM
8 viewsavoid.net — verified advice for a post-truth world