Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Former senior security engineer Shakeeb Ahmed was sentenced to three years in federal prison on April 12, 2024, after pleading guilty to computer fraud tied to two 2022 attacks on decentralized cryptocurrency protocols. The U.S. Department of Justice said the exploits generated more than $12 million in cryptocurrency proceeds. Ahmed was also ordered to serve three years of supervised release, forfeit about $12.3 million and pay more than $5 million in restitution.
Who is Shakeeb Ahmed?
Ahmed was 34, a U.S. citizen living in New York, and a senior security engineer at the time of the attacks. The Justice Department said he had expertise in smart-contract reverse engineering and blockchain audits. His technical background matters because the attacks targeted the rules embedded in financial software, rather than relying on a stolen password or private key. (DOJ guilty-plea announcement)
How did the two DeFi exploits work?
The attacks took place in July 2022, but they used different weaknesses. Decentralized-finance, or DeFi, protocols rely on smart contracts—software that automatically applies financial rules on a blockchain. If those rules mishandle prices or fees, a contract can treat an economically false result as valid.
The first exchange: about $9 million in fraudulent fees
On or about July 2–3, 2022, Ahmed exploited a smart contract used by a decentralized exchange, which the DOJ’s sentencing announcement refers to as the “Crypto Exchange.” The DOJ said he manipulated fake pricing data so the contract calculated approximately $9 million in inflated trading fees, which he then withdrew as cryptocurrency. Media coverage identifies the exchange as Crema Finance; that name does not appear in the DOJ sentencing announcement. (DOJ sentencing announcement; Tech Times)
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Nirvana Finance: about $3.6 million from a pricing flaw
On July 28, 2022, Ahmed used an approximately $10 million flash loan in an attack on Nirvana Finance. A flash loan is borrowed and repaid within the same blockchain transaction or transaction sequence; if repayment conditions are not met, the contract typically reverses the transaction.
According to the DOJ’s account, Ahmed used the temporary funds to buy Nirvana’s ANA token at an artificially low initial price. After the contract updated the price to reflect the large purchase, he sold the tokens back to Nirvana at the higher price, gaining about $3.6 million. The amount represented nearly all of Nirvana’s available funds, and the protocol shut down soon afterward. (DOJ guilty-plea announcement)
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Why was this treated as computer fraud, not a bug-bounty dispute?
The Justice Department’s account emphasizes what Ahmed did after extracting the funds. After the first attack, he offered to return the money while keeping about $1.5 million, on the condition that the exchange not report the attack to law enforcement. At Nirvana, he demanded about $1.4 million despite the protocol’s offer of a bug bounty of up to $600,000; no agreement was reached, and he retained the funds. (DOJ guilty-plea announcement)
A conventional bug bounty authorizes testing within stated limits and sets a reward for reporting a vulnerability through an established channel. Taking funds without authorization and then making their return conditional on payment or silence is materially different. Calling an operation “white hat” does not itself make it authorized security research or provide a legal defense; the label does not determine how prosecutors or a court assess the conduct.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
What did Ahmed plead guilty to?
Ahmed pleaded guilty on December 14, 2023, to one count of computer fraud. The DOJ said that count carried a statutory maximum of five years in prison. His plea also acknowledged responsibility for both attacks; the public DOJ account does not describe two separate guilty counts. The eventual three-year prison sentence was below the stated statutory maximum. (DOJ guilty-plea announcement)
How did investigators say he moved the cryptocurrency?
The DOJ said Ahmed used token swaps, moved proceeds from Solana to Ethereum through a bridge, converted assets into Monero, used overseas cryptocurrency exchanges and used mixers, including Samourai Whirlpool. These methods can complicate tracing by changing assets, networks or transaction paths. They did not prevent investigators from developing a case that led to a guilty plea and forfeiture order. The DOJ’s account does not establish that every forfeited asset had already been returned to victims. (DOJ sentencing announcement)
Rank #4
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
What did the sentence require?
| Consequence | What the court ordered or the DOJ reported |
|---|---|
| Prison | Three years in federal prison, imposed April 12, 2024. |
| Supervised release | Three years after imprisonment. |
| Forfeiture | Approximately $12.3 million plus cryptocurrency. The forfeiture order states a money judgment of $12,336,749.11. |
| Restitution | $5,071,074.23 under the DOJ guilty-plea announcement; the sentencing announcement describes the amount as more than $5 million. |
These amounts describe different legal consequences and should not be added together as if they were one measure of the victims’ loss. Forfeiture is the government’s recovery of proceeds tied to criminal conduct; restitution is intended to compensate victims. The “more than $12 million” figure is a rounded dollar valuation of cryptocurrency, not a claim that Ahmed took that amount in cash. The forfeiture order lists assets including DAI, Monero, Bitcoin, Wrapped Bitcoin, USDC, ETH and SOL. (DOJ sentencing announcement; DOJ guilty-plea announcement; forfeiture order)
What the case shows about DeFi security
- Pricing and accounting logic are security boundaries. A protocol can be compromised without a stolen credential if its contracts accept manipulated prices or calculate fees incorrectly.
- Temporary liquidity can magnify a flaw. The Nirvana exploit illustrates how a flash loan can supply capital for a transaction, while the protocol’s own logic determines whether that capital produces an unintended gain.
- Public blockchains are not automatically anonymous. Cross-chain transfers, privacy-focused assets and mixers did not make this investigation impossible.
- Technical skill does not confer authorization. A vulnerability report and an unauthorized extraction followed by a demand for payment are legally distinct actions.
The DOJ called Ahmed’s plea the first-ever conviction for a smart-contract hack, a characterization that should be understood as the department’s description of the case. The prosecution concerns Ahmed’s specific admitted conduct; it does not establish that every vulnerability disclosure or bug-bounty negotiation is criminal.
Quick Recap
Best Value
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
