The unsealing of a five-count criminal indictment against Canadian national Andean Medjedovic on February 20, 2025, has reignited urgent conversations about security standards in decentralized finance. The 22-year-old allegedly exploited vulnerabilities in the KyberSwap and Indexed Finance protocols to steal approximately $65 million from investors between 2021 and 2023, exposing fundamental weaknesses in how DeFi smart contracts handle complex trading logic. With Bitcoin trading at $98,333 and Ethereum at $2,740 at the time of the indictment’s unsealing, the case arrives amid a market environment where DeFi protocols hold tens of billions in total value locked.
The Threat Landscape
The Medjedovic case illustrates a class of attack that has become endemic in DeFi: the manipulation of automated market maker (AMM) pricing logic through deceptive trading strategies. According to the Department of Justice indictment, Medjedovic borrowed hundreds of millions of dollars in digital tokens, then executed trades designed to cause the protocols’ smart contracts to miscalculate key variables such as token prices and pool balances. By exploiting these calculation errors, he was able to withdraw investor funds at artificially favorable prices, rendering victims’ holdings essentially worthless.
The threat landscape has evolved significantly since these exploits occurred. Attackers now routinely target flash loan vulnerabilities, oracle manipulation, reentrancy bugs, and complex cross-protocol interaction flaws. The FBI’s formal attribution of the $1.5 billion Bybit hack to North Korea’s Lazarus Group, revealed on the same day as the Medjedovic indictment, underscores that DeFi faces threats from both individual actors and sophisticated state-sponsored groups.
Core Principles
Protocol security begins with the principle of minimal attack surface. Smart contracts should do one thing and do it well, avoiding unnecessary complexity that creates hidden vulnerabilities. The KyberSwap exploit succeeded in part because the protocol’s elastic pool mathematics created an edge case that could be manipulated under specific conditions of extreme token imbalance.
Formal verification is no longer optional for protocols managing significant value. Mathematical proofs that a contract’s behavior matches its specification can catch the kind of subtle logical errors that manual code reviews miss. Tools like Certora Prover and Halmos have matured to the point where they can be integrated into continuous deployment pipelines.
Economic security modeling must complement code audits. Protocols should stress-test their incentive structures against adversarial scenarios, including flash loan-enabled attacks, governance manipulation, and oracle exploitation. The assumption that market participants will act honestly is fundamentally flawed in a permissionless environment.
Tooling and Setup
For developers building DeFi protocols today, a robust security stack includes multiple layers. Static analysis tools like Slither and Mythril can automatically detect common vulnerability patterns in Solidity code. Dynamic testing with property-based fuzzers like Echidna generates adversarial inputs that probe contract behavior at the edges.
External audits from multiple independent firms provide defense in depth. A single audit is insufficient for protocols managing user funds. The gold standard has become at least three separate audits from reputable firms, followed by a bug bounty program with rewards proportional to the value secured.
Real-time monitoring is essential for post-deployment security. Tools like Forta and OpenZeppelin Defender can detect anomalous transaction patterns, sudden changes in protocol TVL, or suspicious governance proposals. When KyberSwap was exploited, rapid detection and response could have limited losses significantly.
Ongoing Vigilance
The Medjedovic indictment reveals a troubling post-exploitation dimension: the alleged extortion attempt. After draining KyberSwap, Medjedovic reportedly demanded complete control of the protocol and its associated DAO in exchange for returning 50 percent of stolen funds. This kind of extortion is becoming more common in DeFi, where the immutable nature of deployed smart contracts means that attackers can negotiate from a position of strength.
Protocols must establish incident response plans before exploitation occurs. This includes pre-negotiated relationships with blockchain analytics firms for fund tracing, legal counsel familiar with cross-border crypto crime, and communication templates for user notification. The hours immediately following an exploit are critical, and ad hoc responses invariably leave money on the table.
Final Takeaway
The convergence of the Medjedovic indictment and the Bybit hack attribution on February 20, 2025, paints a clear picture: crypto security is not a destination but a continuous process. Protocols must invest in security at every stage of their lifecycle, from design and development through deployment and operation. Users, meanwhile, should favor protocols with demonstrated security maturity, multiple audits, active bug bounty programs, and transparent incident response procedures. In a market where a single vulnerability can cost $65 million or even $1.5 billion, the cost of inadequate security is simply too high to bear.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Always conduct your own research before making any financial decisions.
22 years old and pulled $65M from two protocols. the age of these attackers keeps dropping while the damage keeps climbing
22 years old with the sophistication to borrow hundreds of millions for a flash attack. the talent pipeline for attackers is terrifying
KyberSwap and Indexed both hit with the same class of attack and nobody connected the dots for two years. on-chain forensics has a long way to go
AMM math is notoriously hard to audit because the edge cases live in the interaction between price curves and pool balances. two years to connect the dots is embarrassing
audit_scourge is right that AMM edge cases are brutal. but two years to connect the same attacker across two protocols is a forensic failure
audit_scourge_ differential fuzzing on AMM logic should be standard by now. Echidna exists, people just dont want to pay for the extra audit days
audit_scourge_ the interaction between price curves and pool balances is exactly why static analysis tools miss these bugs. you need differential fuzzing on the AMM logic itself
borrowing hundreds of millions to manipulate AMM pricing logic. the DeFi composability that makes this space exciting is the same thing that makes it dangerous
andrei nailed it. DeFi composability is the killer feature and the killer vulnerability at the same time
Tomas J, composability means every protocol inherits the vulnerabilities of every protocol it touches. the feature and the vulnerability are literally the same thing
22 years old and sophisticated enough to borrow hundreds of millions for a flash attack. the defender age advantage is gone