Particle.news
Download on the App Store

Dormant Wallet Tied to KyberSwap and Indexed Finance Offloads $2 Million in Tokens

U.S. prosecutors earlier named Canadian Andean Medjedovic in an indictment over both exploits.

Overview

  • Address 0x3EBF, flagged by Lookonchain on Dec. 30, reactivated after roughly a year and sold more than $2 million worth of assets.
  • On-chain data shows sales of about 226,961 UNI (~$1.36 million), 33,215 LINK (~$410,000), 845,806 CRV (~$328,000), and just over 5 YFI (~$17,500).
  • Investigators have linked the address to funds from the 2021 Indexed Finance manipulation and the 2023 KyberSwap Elastic pool exploit.
  • The February 2025 U.S. indictment alleges Medjedovic carried out both attacks, laundered proceeds via mixers and cross-chain bridges, and remains at large.
  • Industry tallies for 2025 report $2.7–$3.4 billion in crypto theft, led by centralized platform breaches including Bybit’s $1.5 billion hack, with over $2 billion attributed to groups tied to North Korea.