Notorious Crypto Hacker's Wallet Resurfaces: $13.5M in Ether Sent to Tornado Cash After Year-Long Silence

A wallet associated with Andean Medjedovic, the hacker accused of orchestrating the $65 million Indexed Finance and Kyberswap exploits, has resurfaced after a year-long pause in activity. On-chain records confirm that on Wednesday, the wallet sent $13.5 million worth of Ether tokens to Tornado Cash, a widely used service for obscuring the origins of stolen crypto funds.

It remains unconfirmed whether Medjedovic himself executed the transactions. The hacker has previously been accused of collaborating with another individual to move illicitly obtained funds.

"It’s concerning to see a threat actor act with such confidence after exploiting multiple victims. Hopefully, he is apprehended and held accountable."
Specter, pseudonymous blockchain investigator tracking Medjedovic’s on-chain activity

Between 2021 and 2023, Medjedovic allegedly stole approximately $65 million by exploiting vulnerabilities in two decentralized finance (DeFi) protocols: Indexed Finance and Kyberswap.

In February 2022, the U.S. Department of Justice charged Medjedovic with wire fraud, computer hacking, and attempted extortion in connection with the two hacks. Despite the allegations, Medjedovic maintains his innocence, arguing that his actions were lawful trades exploiting poorly written protocol code—a defense often cited in crypto circles as "code is law."

The recent activity brings the total amount of laundered funds tied to Medjedovic’s exploits to nearly $25 million.

Who is Andean Medjedovic?

Medjedovic, a Canadian national, is known for his early academic prowess. He graduated high school at just 14 years old and later enrolled at the University of Waterloo, the same institution attended by Ethereum co-founder Vitalik Buterin. He completed an undergraduate degree in pure mathematics in three years—a year ahead of schedule—and earned a master’s degree in just one year.

The Digital Breadcrumbs Leading to His Identity

Medjedovic’s downfall began with a careless act of vanity. In October 2021, he edited a Wikipedia page for a Canadian TV show he had appeared on, adding himself to the list of notable alumni as a "notable mathematician." The username he used for this edit was later linked to his involvement in the $16 million Indexed Finance hack.

Previously, the same username had been used to register for a competitive programming event, where wallets connected to the Indexed Finance hack were also utilized. This connection provided investigators with enough evidence to link Medjedovic’s real identity to the theft—though it was not sufficient to secure a conviction.

Life on the Run and Controversial Claims

In December 2021, Medjedovic went into hiding after an Ontario judge issued an arrest warrant for failing to appear in court. In early 2023, he spoke to DL News, claiming to still be at large and living on an unnamed island. During the conversation, he made derogatory remarks about women and racist comments.

Medjedovic also asserted that he had transitioned to working as a "whitehat" hacker—an ethical security researcher who identifies and fixes vulnerabilities with permission. However, on-chain activity linked to his past exploits continued to surface months later, casting doubt on his claims.