Key Takeaways:
Andean Medjedovic moved 2,900 ETH value $6.8 million to Twister Money on April 29, 2026. The DOJ charged Medjedovic in February 2025 for the $48.8M Kyberswap and $16.5M Listed Finance hacks. Medjedovic stays a fugitive regardless of FBI, IRS, and Homeland Safety involvement within the investigation.
A Fugitive Nonetheless Shifting Funds
The transfer to Twister Money, a cryptocurrency mixer designed to obscure transaction trails, means that Medjedovic may be actively trying to launder exploit proceeds that federal prosecutors have described as among the many “most technically subtle” in Defi historical past.
Medjedovic was charged by the U.S. Division of Justice in February 2025 with wire fraud, unauthorized harm to a protected laptop, tried Hobbs Act extortion, cash laundering conspiracy, and cash laundering. As Bitcoin.com reported on the time, he has remained at massive regardless of the involvement of the FBI, the Inside Income Service, Homeland Safety Investigations, and worldwide cooperation from Dutch regulation enforcement authorities.
How the Exploits Labored
Medjedovic focused each Listed Finance and Kyberswap utilizing a variation of the identical technique by which he borrowed massive volumes of digital tokens by flash loans and executed a sequence of trades engineered to trigger the protocols’ automated market maker ( AMM) sensible contracts to miscalculate key inside worth variables.
Working on code logic somewhat than human oversight, the contracts then allowed Medjedovic to withdraw funds at synthetic costs that made his exits much more worthwhile than the precise market charge.
The Listed Finance assault in 2021 netted roughly $16.5 million, whereas the Kyberswap exploit on November 23, 2023, was considerably bigger, with Medjedovic draining roughly $48.8 million from the protocol. He then moved 800 ETH within the months following that assault, establishing a sample of gradual fund dispersal.
Wednesday’s switch of two,900 ETH to Twister Money represents the biggest single confirmed laundering transfer since then. The complete scope of what Medjedovic has transformed or moved for the reason that exploits stays unclear from onchain knowledge alone.
Past the hacks, federal prosecutors have additionally charged Medjedovic with tried extortion as a result of, after the Kyberswap exploit, he allegedly demanded compensation from the protocol in change for returning a portion of stolen property.
Lastly, Twister Money was sanctioned by the U.S. Treasury in 2022, which means its use by somebody already going through federal cash laundering costs compounds Medjedovic’s authorized publicity, assuming he’s ever arrested. His whereabouts stay unknown, with no arrest having been made up to now.
