A US judge sentences ex-Amazon security engineer Shakeeb Ahmed to three years in prison for stealing $12.3M+ from Nirvana and another crypto exchange in 2022
and forfeiture of all the stolen crypto — is the inevitable consequence of such destructive hacks." Wu Blockchain / @wublockchain : SHAKEEB AHMED was sentenced today by a U.S. District Judge to three years in prison for hacking two separate DEXs and stealing more than $12 million worth of cryptocurrency, marking the first-ever U.S. conviction for hacking a smart contract. One such DEX is Nirvana Finance.... Lorenzo Franceschi-Bicchierai / @lorenzofb : NEW: Shakeeb Ahmed has been convicted to three years in prison for hacking two cryptocurrency exchanges, and stealing around $12 million in crypto. One of his victims, Nirvana Finance, had to shut down after the hack. https://techcrunch.com/...
Context & Ripple Effects
Ahmed’s sentencing follows his guilty plea over the two 2022 exchange hacks, which drained more than $12.3 million and left Nirvana Finance shut down. The case now moves from admission of wrongdoing to a completed criminal penalty and asset forfeiture.
The reported first U.S. conviction for hacking a smart contract gives the outcome significance beyond one failed DEX: it puts a concrete enforcement result alongside earlier prosecutions involving crypto-market misconduct, including the Coinbase insider-trading case.
First-order effects
- Ahmed receives a three-year prison sentence and must forfeit the cryptocurrency tied to the hacks, closing the criminal case against the former Amazon security engineer.
- Nirvana Finance remains a direct casualty of the exploit: its shutdown shows that a smart-contract breach can permanently remove a venue from the market.
Second-order effects
- DEX operators and their users have a clearer legal precedent that exploiting smart-contract logic can produce hacking liability, rather than being treated merely as an aggressive on-chain trade.
- The forfeiture order strengthens the practical incentive for exchanges and investigators to trace stolen assets, since prosecution can seek both a custodial sentence and recovery of proceeds.
Third-order effects
- If this approach is applied consistently, smart-contract security failures will be treated less as isolated protocol risks and more as an enforcement and viability issue for decentralized-market operators.
- The case signals a broader normalization of criminal enforcement around crypto-market conduct, spanning code exploits and other conduct such as crypto insider trading, though the scope of future smart-contract cases will depend on their facts.
The trend: Crypto markets are being pulled into a more established enforcement framework in which technical exploits and market abuse increasingly carry conventional criminal and asset-recovery consequences.