Skip to main content
Sign in
← avoid.net

Verify a decision

Every moderation decision on AVOID.NET is anchored to the Solana blockchain. You don't have to trust us — you can verify cryptographically that we committed to a verdict at a specific moment and have not rewritten it.

How verification works

  1. We commit. When a moderator accepts/rejects a submission, we serialize the decision into deterministic UTF-8 bytes (payload_canonical_string), hash it with SHA-256, encode the digest as base58, and write it to Solana inside an SPL Memo v2 transaction.
  2. We store the bytes. The exact bytes we hashed are stored alongside the decision in our database. Anyone can read them and recompute the hash in any language.
  3. You compare three values. Database hash, your independently-recomputed hash, and the hash inside the on-chain memo. If all three match, the decision is authentic and timestamped.
The on-chain memo format is AVOID.NET|v1|h:<b58-sha256>|d:<id>|t:<iso>

Find a signature on any investigation page's decision log, or run python -m src.verify_decision --signature <sig> for a CLI check.

Sequence
#1
Score
Cluster
mainnet-beta
Slot
429665284
Off-chain at
2026-06-29T12:31:02.717Z
Anchored at
Block time

Independent verification

1. Database (off-chain)
RZgPBLzXfH3jitiLbyGD6rjuEoQQV3fjWyFxu1y73Wt
2. Recomputed (your browser)
computing…
3. On-chain (Solana memo)
fetching…
Canonical bytes hashed (27066 chars)
{"actor":"system:backfill","investigation_id":"1399b506-9669-4b41-9363-edcaf2c1d7fa","kind":"publish","page_slug":"andean-medjedovic-kyberswap-indexed-finance-attacker","published_at":"2026-06-29T12:31:02.643Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Andean Medjedovic (KyberSwap / Indexed Finance Attacker)","sections":[{"content":"Andean Medjedovic, also known as 'Andy,' is a Canadian national from Hamilton, Ontario. He is reported to have completed a master's degree in pure mathematics from the University of Waterloo at age 18 or 19. Medjedovic was approximately 18 years old at the time of the Indexed Finance exploit in October 2021. His academic background in mathematics is cited by prosecutors and investigators as relevant to the technical sophistication of the alleged attacks. He has described himself publicly as believing his actions were legal under a 'code is law' philosophy, a view he has repeatedly expressed to journalists and in online communications. His identity was allegedly first connected to the Indexed Finance attack through a trail of online usernames traced to a Hamilton-Wentworth District School Board email address and a Wikipedia edit for the high school quiz show Reach For The Top.","heading":"Background and Identity","severity":"medium","sources":[{"credibility":2,"name":"CTV News: 'I may be on the run forever now' — Canadian man named in alleged US$65-million crypto scheme","type":"news_article","url":"https://www.ctvnews.ca/toronto/article/i-may-be-on-the-run-forever-now-canadian-man-named-in-alleged-us65-million-crypto-scheme/"},{"credibility":2,"name":"CoinDesk: U.S. Prosecutors Charge Canadian Man With $65M Hacks of Indexed Finance, KyberSwap","type":"news_article","url":"https://www.coindesk.com/policy/2025/02/03/u-s-prosecutors-charge-canadian-man-with-usd65m-hacks-of-indexed-finance-kyberswap"},{"credibility":2,"name":"Blockworks: Canadian $15.8M DeFi Theft Case Could Upend 'Code is Law' Convention","type":"news_article","url":"https://blockworks.com/news/canadian-15-8m-defi-theft-case-could-upend-code-is-law-convention"}]},{"content":"On February 3, 2025, the U.S. Attorney's Office for the Eastern District of New York unsealed a five-count indictment against Medjedovic. The charges are: (1) wire fraud, (2) unauthorized damage to a protected computer under the Computer Fraud and Abuse Act, (3) attempted Hobbs Act extortion, (4) money laundering conspiracy, and (5) money laundering. The maximum statutory penalties are 10 years imprisonment on the computer damage count and 20 years on each of the remaining counts, for a combined maximum exposure of 90 years. The indictment was filed in the U.S. District Court for the Eastern District of New York. The U.S. Department of Justice confirmed Medjedovic remains 'at large' and is not believed to be in the United States. Investigating agencies include the FBI New York Field Office, IRS Criminal Investigation, Homeland Security Investigations New York, and the Netherlands Public Prosecution Service with Dutch National Police.","heading":"Criminal Charges (U.S. Federal Indictment)","severity":"critical","sources":[{"credibility":1,"name":"DOJ Office of Public Affairs: Canadian Man Charged in $65M Cryptocurrency Hacking Schemes","type":"regulatory","url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"credibility":2,"name":"The Record: Indictment — Canadian accused of two cryptocurrency platform hacks","type":"news_article","url":"https://therecord.media/indictment-canadian-two-cryptocurrency-platform-hacks"}]},{"content":"In October 2021, an attacker later identified by prosecutors as Medjedovic exploited the DeFi protocol Indexed Finance, draining approximately $16.5 million in digital assets. Medjedovic subsequently publicly acknowledged his role in the Indexed Finance exploit, characterizing it as legal because he had merely exploited a flaw in the protocol's design rather than conducting unauthorized access. The attack allegedly involved borrowing approximately $159 million in digital tokens via flash loans to manipulate the protocol's re-indexing process, allowing the attacker to purchase assets at artificially deflated prices. Following the attack, he allegedly told an associate: 'I did something very cool but accidentally doxxed myself in the process.' On December 17, 2021, a notice of action was filed in the Ontario Superior Court of Justice by Cicada 137 LLC on behalf of Indexed Finance investors, representing a proposed class action. An Ontario Superior Court justice also issued an order to freeze the missing tokens and authorized a civil search-and-seizure order. A Canadian court issued a bench warrant for Medjedovic's arrest in December 2021 after he failed to appear for a court proceeding. This case is regarded as one of the first in Canada to challenge the 'code is law' defense in DeFi.","heading":"Indexed Finance Exploit (October 2021)","severity":"critical","sources":[{"credibility":1,"name":"DOJ Office of Public Affairs: Canadian Man Charged in $65M Cryptocurrency Hacking Schemes","type":"regulatory","url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"credibility":2,"name":"Blockworks: Canadian $15.8M DeFi Theft Case Could Upend 'Code is Law' Convention","type":"news_article","url":"https://blockworks.com/news/canadian-15-8m-defi-theft-case-could-upend-code-is-law-convention"},{"credibility":2,"name":"DL News: Indexed Finance hacker charged in US for alleged $65m theft","type":"news_article","url":"https://www.dlnews.com/articles/defi/indexed-finance-hacker-charged-in-us-over-kyberswap-exploit/"}]},{"content":"On November 22, 2023, the KyberSwap Elastic concentrated liquidity protocol was attacked, resulting in losses of approximately $48.4–48.9 million across multiple blockchain networks: approximately $20 million on Arbitrum, $15 million on Optimism, and $7 million on Ethereum, with additional losses on other chains. Prosecutors allege Medjedovic planned the KyberSwap attack for months in advance, with notes in his files reading 'Find time to Strike!' The attack exploited a vulnerability in KyberSwap Elastic's tick-boundary logic. The attacker used flash loans (borrowing approximately 10,000 wstETH, worth roughly $23 million) to manipulate liquidity pool pricing, exploiting an arithmetic precision issue in the protocol's rounding logic that allowed double-counting of liquidity. This enabled the attacker to withdraw investor funds at artificial prices. Evidence linking Medjedovic to the KyberSwap exploit included a wallet transfer of approximately $2 million from a wallet associated with the Kyber exploiter to a wallet linked to Medjedovic. Following the exploit, the attacker sent an on-chain message demanding 'complete control of the KyberSwap protocol and the decentralized autonomous organization overseeing it' in exchange for returning 50% of the stolen assets — an action prosecutors charge as attempted Hobbs Act extortion. The attacker also threatened to 'alert authorities' if demands were not met. KyberSwap subsequently launched a Treasury Grant Program that covered 100% of affected user funds.","heading":"KyberSwap Elastic Exploit (November 2023)","severity":"critical","sources":[{"credibility":1,"name":"DOJ Office of Public Affairs: Canadian Man Charged in $65M Cryptocurrency Hacking Schemes","type":"regulatory","url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"credibility":2,"name":"KyberSwap Blog: Post Mortem — KyberSwap Elastic Exploit November 2023","type":"official","url":"https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/"},{"credibility":2,"name":"CoinDesk: KyberSwap DEX Hacked for $48 Million, Attacker Teases Negotiations","type":"news_article","url":"https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations"},{"credibility":2,"name":"Halborn: Explained — The KyberSwap Hack (November 2023)","type":"research","url":"https://www.halborn.com/blog/post/explained-the-kyberswap-hack-november-2023"},{"credibility":2,"name":"SlowMist: A Deep Dive Into the KyberSwap Hack","type":"research","url":"https://slowmist.medium.com/a-deep-dive-into-the-kyberswap-hack-3e13f3305d3a"}]},{"content":"Prosecutors allege Medjedovic laundered proceeds from both exploits through multiple methods: swap transactions, cross-chain bridging transactions, digital asset mixers (including Tornado Cash), and by opening exchange accounts using false and borrowed identifying information. According to indictment documents, Medjedovic maintained files with notes such as 'make new bank account under fake ID' and 'order documents online (Russian + Brazil + American citizen).' In approximately February 2024, he allegedly paid approximately $86,559 to an undercover law enforcement agent for assistance with laundering proceeds. An unnamed relative is also alleged to have assisted with laundering funds. As of April 30, 2026, blockchain investigator Specter reported that wallets tied to Medjedovic transferred approximately $13.5 million in Ether to Tornado Cash, bringing the total allegedly laundered via that mixer to nearly $25 million. The DL News report noted attribution uncertainty: 'it's not clear if Medjedovic himself is behind the transactions,' as he has previously conspired with others to move stolen funds.","heading":"Money Laundering and Financial Concealment","severity":"critical","sources":[{"credibility":1,"name":"DOJ Office of Public Affairs: Canadian Man Charged in $65M Cryptocurrency Hacking Schemes","type":"regulatory","url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"credibility":2,"name":"DL News: A wallet tied to one of crypto's most notorious hackers is laundering funds again","type":"news_article","url":"https://www.dlnews.com/articles/people-culture/wallets-tied-to-andean-medjedovic-use-tornado-cash/"},{"credibility":2,"name":"TRM Labs: Canadian National Charged With Stealing $65 Million in Crypto From Two DeFi Protocols","type":"research","url":"https://www.trmlabs.com/resources/blog/canadian-national-charged-with-stealing-65-million-in-crypto-from-two-defi-protocols"}]},{"content":"Medjedovic has been a fugitive from Canadian authorities since December 2021, when an Ontario Superior Court issued a bench warrant for his arrest after he failed to appear for a civil proceeding. A European arrest warrant was issued in December 2023 following the KyberSwap attack, issued at the request of Dutch authorities who alleged the KyberSwap hack was executed from a hotel in The Hague, which Medjedovic allegedly checked into using a fake Slovak passport in the name 'Luka Krajovic.' He was arrested in Belgrade, Serbia on August 9, 2024 after an Interpol Red Notice was issued and he was tracked to Belgrade using the alias 'Lorenzo' to book an apartment. He spent approximately 105 days in Serbian custody. The Belgrade Higher Court denied the Dutch extradition request, ruling that Dutch prosecutors had not sufficiently proven Medjedovic's guilt and that the alleged crimes carried penalties too light to warrant extradition. Following his release, he was believed to be in Bosnia, where he has alleged family connections. As of a U.S. Department of Justice filing dated January 17, 2025, Medjedovic was believed to be at large in Bosnia. In 2023, before the U.S. indictment, he reportedly told journalists he had been 'bouncing around through Europe, South America and an unnamed island nation.' He publicly stated 'I may be on the run forever now' and expressed a desire for advice about 'becoming a pirate.' An Interpol Red Notice remains active for Medjedovic.","heading":"Fugitive Status and International Manhunt","severity":"critical","sources":[{"credibility":1,"name":"CBC News: Fake passports, $65M US and an Interpol Red Notice — Canadian crypto fugitive vanishes after arrest in Serbia","type":"news_article","url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147"},{"credibility":2,"name":"Balkan Insight: Canadian Crypto Fugitive Slips Dragnet in Serbia, Surfaces in Bosnia","type":"news_article","url":"https://balkaninsight.com/2026/01/30/canadian-crypto-fugitive-slips-dragnet-in-serbia-surfaces-in-bosnia/bi/"},{"credibility":2,"name":"CTV News: 'I may be on the run forever now' — Canadian man named in alleged US$65-million crypto scheme","type":"news_article","url":"https://www.ctvnews.ca/toronto/article/i-may-be-on-the-run-forever-now-canadian-man-named-in-alleged-us65-million-crypto-scheme/"},{"credibility":2,"name":"Cryptopolitan: Canadian crypto theft suspect eludes European net after Serbia release, tracked to Bosnia","type":"news_article","url":"https://www.cryptopolitan.com/canadian-crypto-theft-suspect-serbia/"}]},{"content":"In February 2026, documents filed under the Foreign Agents Registration Act revealed that the Washington D.C. lobbying firm JM Burkman & Associates had been retained for $300,000 USD to seek a U.S. presidential pardon for Medjedovic. The filings, dated February 20, 2026, and first reported by Juno News, state the firm intends to engage government officials 'for the purpose of achieving a presidential pardon.' Jacob Wohl, a partner at JM Burkman, described Medjedovic as a 'very brilliant young man' and 'admirable in a lot of ways.' The lobbying firm's stated arguments for dismissal included that similar conduct is typically left to regulators, that similar cases have been resolved favorably, and that the case has 'little, if any, connection to the US.' The filing characterizes Medjedovic's conduct as identifying 'an ingenious way to operate within the boundaries set by' the platforms and executing 'standard permissible trades for profit' — language that mirrors the 'code is law' defense rejected by a federal jury in the Avi Eisenberg/Mango Markets case.","heading":"Presidential Pardon Lobbying Effort","severity":"high","sources":[{"credibility":1,"name":"CBC News: Canadian crypto fugitive is seeking U.S. presidential pardon on criminal indictment, U.S. lobbying firm says","type":"news_article","url":"https://www.cbc.ca/news/canada/andean-medjedovic-lobbyist-seeking-pardon-9.7130131"},{"credibility":2,"name":"Balkan Insight: Fugitive Canadian Hacker, Released by Serbia, Seeks Pardon from Trump","type":"news_article","url":"https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/"}]},{"content":"The Medjedovic case is regarded as legally significant because it represents one of the first federal prosecutions to treat DeFi smart contract exploitation as wire fraud rather than a purely civil or regulatory matter. Medjedovic publicly adhered to a 'code is law' philosophy — the argument that exploiting a flaw in an automated protocol is not illegal because it operates within the rules set by the code itself. Prosecutors drew a parallel to the case of Avraham Eisenberg, who used similar logic after stealing approximately $110 million from Mango Markets; a federal jury rejected that defense and convicted Eisenberg of fraud and market manipulation. The Indexed Finance civil case in Ontario was also among the first in Canada to challenge the 'code is law' convention. Canadian law firm WeirFoulds has published commentary noting the significance of the EDNY indictment for the application of traditional fraud statutes to DeFi exploits.","heading":"Legal Significance: 'Code is Law' Defense","severity":"medium","sources":[{"credibility":2,"name":"WeirFoulds LLP: Canadian Medjedovic Indicted for DeFi Fraud in the Eastern District of New York","type":"other","url":"https://www.weirfoulds.com/canadian-medjedovic-indicted-for-defi-fraud-in-the-eastern-district-of-new-york-rule-of-law-2-code-is-law-0"},{"credibility":2,"name":"Blockworks: Canadian $15.8M DeFi Theft Case Could Upend 'Code is Law' Convention","type":"news_article","url":"https://blockworks.com/news/canadian-15-8m-defi-theft-case-could-upend-code-is-law-convention"},{"credibility":2,"name":"CoinDesk: U.S. Prosecutors Charge Canadian Man With $65M Hacks of Indexed Finance, KyberSwap","type":"news_article","url":"https://www.coindesk.com/policy/2025/02/03/u-s-prosecutors-charge-canadian-man-with-usd65m-hacks-of-indexed-finance-kyberswap"}]},{"content":"A proposed class action lawsuit filed on December 17, 2021 in the Ontario Superior Court of Justice by Cicada 137 LLC on behalf of Indexed Finance investors remains active, seeking to hold Medjedovic liable for the $16.5 million Indexed Finance exploit. The Ontario court issued an order freezing the stolen tokens and authorized a civil search-and-seizure order allowing authorities to search Medjedovic's residence for passwords and related evidence. An Ontario Superior Court justice issued the bench warrant for Medjedovic's arrest in December 2021 after he failed to appear in these proceedings. The Blockscope Research report also notes a parallel class-action in the Ontario Superior Court of Justice remains active as of the time of the U.S. indictment.","heading":"Civil Litigation","severity":"high","sources":[{"credibility":2,"name":"Blockscope Research: The Legal Pursuit of Andean Medjedovic","type":"research","url":"https://research.blockscope.co/andean-medjovic-case-and-investigation"},{"credibility":2,"name":"Blockworks: Canadian $15.8M DeFi Theft Case Could Upend 'Code is Law' Convention","type":"news_article","url":"https://blockworks.com/news/canadian-15-8m-defi-theft-case-could-upend-code-is-law-convention"}]}],"sources_used":[{"credibility":1,"name":"DOJ Office of Public Affairs: Canadian Man Charged in $65M Cryptocurrency Hacking Schemes","type":"regulatory","url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"credibility":2,"name":"The Record: Indictment — Canadian accused of two cryptocurrency platform hacks","type":"news_article","url":"https://therecord.media/indictment-canadian-two-cryptocurrency-platform-hacks"},{"credibility":2,"name":"CTV News: 'I may be on the run forever now' — Canadian man named in alleged US$65-million crypto scheme","type":"news_article","url":"https://www.ctvnews.ca/toronto/article/i-may-be-on-the-run-forever-now-canadian-man-named-in-alleged-us65-million-crypto-scheme/"},{"credibility":1,"name":"CBC News: Fake passports, $65M US and an Interpol Red Notice — Canadian crypto fugitive vanishes after arrest in Serbia","type":"news_article","url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147"},{"credibility":1,"name":"CBC News: Canadian crypto fugitive is seeking U.S. presidential pardon on criminal indictment, U.S. lobbying firm says","type":"news_article","url":"https://www.cbc.ca/news/canada/andean-medjedovic-lobbyist-seeking-pardon-9.7130131"},{"credibility":2,"name":"CoinDesk: U.S. Prosecutors Charge Canadian Man With $65M Hacks of Indexed Finance, KyberSwap","type":"news_article","url":"https://www.coindesk.com/policy/2025/02/03/u-s-prosecutors-charge-canadian-man-with-usd65m-hacks-of-indexed-finance-kyberswap"},{"credibility":2,"name":"DL News: Indexed Finance hacker charged in US for alleged $65m theft","type":"news_article","url":"https://www.dlnews.com/articles/defi/indexed-finance-hacker-charged-in-us-over-kyberswap-exploit/"},{"credibility":2,"name":"DL News: A wallet tied to one of crypto's most notorious hackers is laundering funds again","type":"news_article","url":"https://www.dlnews.com/articles/people-culture/wallets-tied-to-andean-medjedovic-use-tornado-cash/"},{"credibility":2,"name":"KyberSwap Blog: Post Mortem — KyberSwap Elastic Exploit November 2023","type":"official","url":"https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/"},{"credibility":2,"name":"CoinDesk: KyberSwap DEX Hacked for $48 Million, Attacker Teases Negotiations","type":"news_article","url":"https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations"},{"credibility":2,"name":"Halborn: Explained — The KyberSwap Hack (November 2023)","type":"research","url":"https://www.halborn.com/blog/post/explained-the-kyberswap-hack-november-2023"},{"credibility":2,"name":"SlowMist: A Deep Dive Into the KyberSwap Hack","type":"research","url":"https://slowmist.medium.com/a-deep-dive-into-the-kyberswap-hack-3e13f3305d3a"},{"credibility":2,"name":"Blockworks: Canadian $15.8M DeFi Theft Case Could Upend 'Code is Law' Convention","type":"news_article","url":"https://blockworks.com/news/canadian-15-8m-defi-theft-case-could-upend-code-is-law-convention"},{"credibility":2,"name":"Blockscope Research: The Legal Pursuit of Andean Medjedovic","type":"research","url":"https://research.blockscope.co/andean-medjovic-case-and-investigation"},{"credibility":2,"name":"TRM Labs: Canadian National Charged With Stealing $65 Million in Crypto From Two DeFi Protocols","type":"research","url":"https://www.trmlabs.com/resources/blog/canadian-national-charged-with-stealing-65-million-in-crypto-from-two-defi-protocols"},{"credibility":2,"name":"Balkan Insight: Canadian Crypto Fugitive Slips Dragnet in Serbia, Surfaces in Bosnia","type":"news_article","url":"https://balkaninsight.com/2026/01/30/canadian-crypto-fugitive-slips-dragnet-in-serbia-surfaces-in-bosnia/bi/"},{"credibility":2,"name":"Balkan Insight: Fugitive Canadian Hacker, Released by Serbia, Seeks Pardon from Trump","type":"news_article","url":"https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/"},{"credibility":2,"name":"WeirFoulds LLP: Canadian Medjedovic Indicted for DeFi Fraud in the Eastern District of New York","type":"other","url":"https://www.weirfoulds.com/canadian-medjedovic-indicted-for-defi-fraud-in-the-eastern-district-of-new-york-rule-of-law-2-code-is-law-0"}],"summary":"Andean Medjedovic is a 22-year-old Canadian national indicted by the U.S. Department of Justice (Eastern District of New York) on February 3, 2025, for allegedly stealing approximately $65 million from two decentralized finance protocols — Indexed Finance ($16.5 million in October 2021) and KyberSwap ($48.4 million in November 2023) — through flash-loan manipulation and deceptive smart contract trading. He has been a fugitive since December 2021, was arrested in Belgrade, Serbia in August 2024 but released after extradition was denied, and was believed to be at large in Bosnia as of January 2025. A Washington D.C. lobbying firm filed documents in February 2026 seeking a U.S. presidential pardon on his behalf.","timeline":[{"date":"2021-10-14","event":"Indexed Finance protocol exploited for approximately $16.5 million via flash-loan manipulation of the protocol's re-indexing process. Medjedovic later publicly acknowledged involvement.","source":"DOJ Office of Public Affairs","source_url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"date":"2021-12-17","event":"Notice of action filed in Ontario Superior Court of Justice (Cicada 137 LLC v. Medjedovic) — proposed class action on behalf of Indexed Finance investors.","source":"Blockworks","source_url":"https://blockworks.com/news/canadian-15-8m-defi-theft-case-could-upend-code-is-law-convention"},{"date":"2021-12","event":"Ontario Superior Court issues bench warrant for Medjedovic's arrest after he fails to appear for civil court proceedings. Medjedovic begins life as a fugitive.","source":"CBC News","source_url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147"},{"date":"2023-11-22","event":"KyberSwap Elastic protocol exploited for approximately $48.4–48.9 million across Arbitrum, Optimism, Ethereum, and other chains via tick-boundary precision exploit using flash loans.","source":"KyberSwap Blog Post Mortem","source_url":"https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/"},{"date":"2023-11","event":"KyberSwap attacker sends on-chain extortion message demanding complete control of the KyberSwap protocol in exchange for returning 50% of stolen assets.","source":"DOJ Office of Public Affairs","source_url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"date":"2023-12-11","event":"European arrest warrant issued by Dutch authorities after establishing the KyberSwap hack was allegedly executed from a hotel in The Hague where Medjedovic checked in using a fake Slovak passport.","source":"CBC News","source_url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147"},{"date":"2024-02","event":"Medjedovic allegedly pays approximately $86,559 to an undercover law enforcement agent for money laundering assistance.","source":"The Record","source_url":"https://therecord.media/indictment-canadian-two-cryptocurrency-platform-hacks"},{"date":"2024-08-09","event":"Medjedovic arrested in Belgrade, Serbia after arriving in the city using the alias 'Lorenzo' to book an apartment. Interpol Belgrade contacts Dutch authorities.","source":"CBC News","source_url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147"},{"date":"2024-11","event":"Belgrade Higher Court denies Dutch extradition request, ruling insufficient proof of guilt and that alleged offenses carried sentences too light to warrant extradition. Medjedovic released after approximately 105 days in custody.","source":"CBC News","source_url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147"},{"date":"2025-01-17","event":"U.S. Department of Justice filing states Medjedovic is believed to be at large in Bosnia.","source":"Balkan Insight","source_url":"https://balkaninsight.com/2026/01/30/canadian-crypto-fugitive-slips-dragnet-in-serbia-surfaces-in-bosnia/bi/"},{"date":"2025-02-03","event":"U.S. Attorney's Office for the Eastern District of New York unseals five-count indictment against Medjedovic: wire fraud, unauthorized computer damage, attempted Hobbs Act extortion, money laundering conspiracy, and money laundering. Maximum combined penalty of 90 years.","source":"DOJ Office of Public Affairs","source_url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"date":"2026-02-20","event":"JM Burkman & Associates files Foreign Agents Registration Act documents disclosing $300,000 retainer to seek a U.S. presidential pardon for Medjedovic.","source":"CBC News","source_url":"https://www.cbc.ca/news/canada/andean-medjedovic-lobbyist-seeking-pardon-9.7130131"},{"date":"2026-04-30","event":"Blockchain investigator Specter reports wallets tied to Medjedovic transfer approximately $13.5 million in Ether to Tornado Cash, bringing total allegedly laundered via the mixer to nearly $25 million. Attribution not definitively confirmed.","source":"DL News","source_url":"https://www.dlnews.com/articles/people-culture/wallets-tied-to-andean-medjedovic-use-tornado-cash/"}]},"v":1}