Wallet linked to accused $65M DeFi hacker Medjedovic moves $13.5M through Tornado Cash
On-chain records show a wallet tied to accused DeFi hacker Andean Medjedovic sent roughly $13.5 million in Ether to Tornado Cash, bringing funds laundered from his alleged thefts to nearly $25 million.
A crypto wallet tied to Andean Medjedovic — the Canadian accused of draining roughly $65 million from two DeFi protocols — has resumed moving money, sending about $13.5 million of Ether to the sanctioned mixer Tornado Cash after a roughly year-long dormancy, according to on-chain records reported by DL News.
The activity is attributed to Medjedovic by Specter, a pseudonymous blockchain investigator who has tracked the wallets. Two caveats belong up front: this rests on a single secondary report and one pseudonymous analyst's chain analysis, and DL News itself notes it is "not clear if Medjedovic himself is behind the transactions" — he has previously been accused of working with an accomplice to move funds. The exact date of the transfer ("Wednesday," per DL News) wasn't specified.
The transfer brings the total laundered from Medjedovic's alleged hacks to nearly $25 million, per DL News — meaning the bulk of the roughly $65 million allegedly stolen remains unmoved or already cycled.
Medjedovic doesn't deny involvement in the underlying exploits. His defense is the "code is law" argument: that draining Indexed Finance ($16 million, October 2021) and Kyberswap ($48 million) were legitimate trades permitted by how the protocols were coded. The U.S. Department of Justice disagreed, charging him in February 2025 with wire fraud, computer hacking and attempted extortion. He was arrested in Serbia in 2024 on a Dutch warrant and released that November after the Belgrade Higher Court found prosecutors hadn't proven he was the perpetrator — and that the alleged conduct carried too light a domestic sentence to justify extradition.
Key facts
- ~$13.5M in ETH sent to Tornado Cash from a wallet tied to Medjedovic (on-chain records via DL News; attribution by investigator "Specter").
- Total laundered from his alleged hacks now ~$25M (DL News).
- Allegedly stole ~$65M: Indexed Finance ~$16M (Oct 2021) and Kyberswap ~$48M (DL News).
- Charged by DoJ in Feb 2025: wire fraud, computer hacking, attempted extortion (DL News).
- Feb 20 (2026): retained lobbyists JM Burkman & Associates, $300K upfront for six months, to seek a presidential pardon (legal filings, per DL News).
The real-world read
The pardon push is the tell. Filings show Medjedovic paid a lobbying firm $300,000 to argue his case should be dropped — partly on the grounds that "similar cases have been dismissed or resolved favorably in the past year." That's a bet on a specific enforcement climate: DL News notes the SEC dropped its BitClout case against Nader Al-Naji, Roger Ver reached a deferred-prosecution deal, and at least seven crypto enforcement actions have been dismissed since the administration changed. A wallet openly routing eight figures through Tornado Cash while its owner shops for clemency reads as someone betting the legal risk is falling. What's unconfirmed: that the mover is Medjedovic personally, and whether "code is law" survives contact with a wire-fraud statute. Neither is settled.
This is not financial or legal advice.