Andean Medjedovic — KyberSwap/Indexed Finance Fugitive, Active Laundering 2026
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5jPRZB…1XffSummary
Andean 'Andy' Medjedovic is a Canadian national charged by the U.S. Department of Justice in February 2025 with five federal counts related to the alleged theft of approximately $65 million across two DeFi exploits: the 2021 Indexed Finance hack ($16.5M) and the 2023 KyberSwap exploit ($48.8M). He has been a fugitive since December 2021, evaded extradition after a Serbian court rejected a Dutch arrest warrant in late 2024, and as of April 2026 wallets attributed to him by law enforcement had routed approximately $24.88 million through Tornado Cash, with an estimated $29 million in exploit proceeds remaining in identified wallets.
Connected Entities
9 entities · 60 linked investigations- Indexed Finance→mentioned with→Ethereum(70%)
- Indexed Finance→mentioned with→KyberSwap(70%)
- Andean Medjedovic→mentioned with→Ethereum(80%)
- Andean Medjedovic→mentioned with→KyberSwap(80%)
- Andean Medjedovic (KyberSwap / Indexed Finance Attacker)→mentioned with→Ethereum(65%)
- Andean Medjedovic (KyberSwap / Indexed Finance Attacker)→mentioned with→KyberSwap(80%)
- Andean Medjedovic — KyberSwap/Indexed Finance Fugitive, Active Laundering 2026→mentioned with→Ethereum(60%)
- Andean Medjedovic — KyberSwap/Indexed Finance Fugitive, Active Laundering 2026→mentioned with→KyberSwap(70%)
- Andean Medjedovic — KyberSwap/Indexed Finance Fugitive, Active Laundering 2026→mentioned with→Bitget(60%)
- Andean Medjedovic (KyberSwap / Indexed Finance Attacker)→mentioned with→Andean Medjedovic(80%)
- + 14 more
Timeline(13 events)
14 October 2021
Indexed Finance protocol exploited for approximately $16.5 million via alleged oracle manipulation using flash loans. Medjedovic later publicly admitted involvement.
DOJ / CoinDeskDecember 2021
Ontario court issues bench warrant for Medjedovic's arrest following the Indexed Finance attack. Medjedovic leaves Canada and begins an extended period as a fugitive.
CBC News22 November 2023
KyberSwap decentralized exchange exploited for approximately $48.8 million across 77 liquidity pools. Prosecutors allege months of prior planning.
DOJNovember 2023
Following the KyberSwap exploit, Medjedovic allegedly sends extortion demands to KyberSwap developers requesting full protocol governance control in exchange for returning 50% of stolen funds.
DOJ11 December 2023
Dutch authorities issue a European arrest warrant for Medjedovic in connection with the KyberSwap hack.
CBC News9 August 2024
Medjedovic arrested by Serbian authorities in Belgrade after arriving under an alias. Interpol Belgrade notified the same day.
CBC News / Balkan InsightNovember 2024
Belgrade Higher Court rejects Netherlands extradition request after 105 days of detention. Court rules that evidence presented by Dutch prosecutors was insufficient to support suspicion of the alleged crimes and that Serbian law did not provide adequate sentencing provisions. Medjedovic is released from custody.
Balkan Insight3 February 2025
DOJ unseals five-count federal indictment against Medjedovic in the Eastern District of New York for the Indexed Finance and KyberSwap exploits totaling approximately $65 million.
DOJ30 January 2026
Balkan Insight publishes investigation confirming Medjedovic's presence in Bosnia and Herzegovina following his escape from Serbian custody.
Balkan Insight20 February 2026
Washington D.C. lobbying firm JM Burkman & Associates files FARA disclosure with the DOJ reporting a $300,000 retainer to seek a U.S. presidential pardon for Medjedovic.
CBC News24 March 2026
Balkan Insight reports on the pardon lobbying effort and confirms Medjedovic's continued fugitive status following Serbia's release.
Balkan Insight29 April 2026
Wallets attributed to Medjedovic route 2,900 ETH (approximately $6.8 million) through Tornado Cash in structured 100-ETH increments — the most significant on-chain activity in approximately one year. Cumulative Tornado Cash outflows from identified wallets reach approximately $24.88 million.
DL News / Bitcoin.com News / Bitget NewsDecision Log
- hash: ErUCKwiSWgpdJUoHPLasXHEEKdLvJsKLwZ6XzGjtMH12
This investigation is cryptographically anchored to the Solana blockchain (1 event). 18 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/21/2026, 12:23:04 PM
last updated: 7/28/2026, 4:23:11 AM
4 viewsavoid.net — verified advice for a post-truth world