Connect with us
DAPA Banner

Crypto World

Washington Man Sentenced to 2 Years for Diverting $35M to Failed DeFi Platform

Published

on

🚨

A Washington state man has been sentenced to two years in federal prison after diverting $35 million from his employer to fund a personal decentralized finance venture that ultimately collapsed during the 2022 crypto market downturn.

Key Takeaways:

  • A former Washington CFO was sentenced to two years in prison for diverting $35 million in company funds into a failed DeFi investment scheme.
  • The crypto strategy collapsed during the 2022 market downturn following the Terra ecosystem crash.
  • The losses severely impacted the company, triggering layoffs and nearly forcing the business to shut down.

Nevin Shetty, 42, was convicted of wire fraud in November after prosecutors showed he secretly transferred company funds into a crypto investment scheme tied to his side project, HighTower Treasury.

The funds belonged to a private software company where Shetty served as chief financial officer.

Prosecutors Say CFO Diverted Funds After Learning of Job Termination

Advertisement

According to the US Department of Justice, Shetty drafted a conservative investment policy for the firm that limited how corporate funds could be used.

Despite those internal guidelines, he moved tens of millions of dollars from the company’s accounts after learning in April 2022 that his position would be terminated due to performance concerns.

The money was routed to HighTower Treasury, where Shetty and a business partner invested heavily in decentralized finance lending protocols promising annual returns of 20% or more.

Prosecutors said Shetty intended to return a fixed payment to the company while keeping the remainder of any profits generated by the crypto strategy.

Advertisement

Initially, the scheme produced modest gains. Court filings show the operation generated roughly $133,000 in its first month.

However, the broader crypto market soon entered a steep downturn following the collapse of the Terra ecosystem in May 2022.

As the market fell, the value of HighTower’s positions rapidly deteriorated. The investments tied to Shetty’s strategy plunged from approximately $35 million to nearly nothing during the subsequent crypto winter.

After the losses became clear, Shetty admitted his actions to colleagues at the company. He was later dismissed from his role.

Advertisement

During sentencing, US District Judge Tana Lin said the incident inflicted serious damage on the business. According to the court, the company faced “significant and severe effects” from the losses and was nearly forced to shut down.

The financial damage also triggered layoffs, with about 60 employees losing their jobs as the company attempted to stabilize operations following the missing funds.

Federal prosecutors had requested a nine-year prison sentence, arguing that Shetty’s actions involved deception and caused lasting harm to the company and its staff. The court ultimately imposed a shorter sentence of two years.

Advertisement

Washington Man Ordered to Pay $35M Restitution After DeFi Fraud

In addition to prison time, Shetty was ordered to pay $35,000,100 in restitution. After completing his sentence, he will remain under supervised release for three years.

Judge Lin also imposed restrictions on Shetty’s future employment, prohibiting him from serving as an officer or director of a company without approval from the probation office.

Last month, two teenagers from California faced serious felony charges after authorities say they traveled hundreds of miles to carry out a violent home invasion in Scottsdale, Arizona, in a bid to obtain cryptocurrency believed to be worth $66 million.

Advertisement

The case came amid a broader rise in so-called wrench attacks, physical assaults aimed at forcing crypto holders to hand over private keys.

Security researcher Jameson Lopp’s public database lists roughly 70 such incidents in 2025, a sharp increase from the previous year.

Security analysts say criminals are increasingly using leaked personal data to identify targets and recruiting young perpetrators online to reduce traceability.

The post Washington Man Sentenced to 2 Years for Diverting $35M to Failed DeFi Platform appeared first on Cryptonews.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Published

on

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider. 

According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings.

“The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said.

Eth.limo serves as a Web2 bridge, providing access to around 2 million decentralized websites using the .eth domain name. Hijacking the service could allow an attacker to redirect users to malicious websites. Ethereum co-founder Vitalik Buterin warned users Friday to avoid his blog until the incident was resolved.

Advertisement

Mark Jeftovic, CEO of easyDNS, has publicly accepted responsibility for the incident in its own postmortem report. 

“We screwed up and we own it,” said Jeftovic on Saturday. 

“This would mark the first successful social engineering attack against an easyDNS client in our 28-year history. There have been countless attempts.”  

Both companies have pointed to the Domain Name System Security Extension (DNSSEC) in thwarting the hacker’s attempts to do further damage. 

The attacker couldn’t produce valid cryptographic signatures, so Domain Name System resolvers rejected the attacker’s forged DNS responses, causing users to see error messages instead of being redirected to malicious sites. 

Advertisement

“DNSSEC was enabled for their domain when the attackers attempted to flip their nameservers, presumably to effect some manner of phishing or malware injection attack, DNSSEC-aware resolvers, which most are these days, began dropping queries,” Jeftovic said. 

Source: eth.limo

In its postmortem, eth.limo noted that because the attacker lacked the signing keys, they were unable to bypass the safeguards, which likely “reduced the blast radius of the hijack. We are not aware of any user impact at this time. We will provide updates if that changes.”

easyDNS makes changes since the attack

Jeftovic described the social engineering attack as “highly sophisticated,” and said easyDNS is still conducting a post-mortem on how the breach occurred, and has already begun rolling out changes to prevent a recurrence.

Source: easyDNS

“In eth.limo’s case, we will be migrating them to Domainsure, which has a security posture more suited toward enterprise and high-value fintech domains, TLDR there is no mechanism for an account recovery on Domainsure, it’s not a thing,” he added.

“On behalf of everyone here, I apologize to the eth.limo team and the wider Ethereum community. ENS has always had a special place in our heart as the first registrar to enable ENS linking to web2 domains and we’ve been involved in the space since 2017.”

Related: RaveDAO denies manipulation as Binance, Bitget probe RAVE trading activity

Advertisement

The eth.limo incident is the latest in a series of domain hijackings targeting crypto projects. Days earlier, decentralized exchange aggregator CoW Swap lost control of its website after an unknown party hijacked its domain. 

Steakhouse Financial, a DeFi advisory and research firm, similarly disclosed at the end of March that it had lost control of its domain to an attacker.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?