Sara Etukudo | 3 June 2024

Summary

• James Peraire-Bueno and Anton Peraire-Bueno, two former MIT students, were accused of stealing $25 million in cryptocurrency.

• This technologically sophisticated incident is unprecedented, marking the first prosecution of its kind.

• The brothers spent months planning the heist, but it only took 12 seconds to execute. 

The US Department of Justice (DOJ) has charged two brothers with wire fraud, conspiracy to commit wire fraud, and conspiracy to commit money laundering for allegedly stealing $25 million in cryptocurrency. James Peraire-Bueno, 28, and Anton Peraire-Bueno, 24, who studied computer science and mathematics at the Massachusetts Institute of Technology (MIT), exploited the Ethereum blockchain to syphon $25 million in just 12 seconds. They were arrested on May 15th 2024 after investigations by IRS agents and DOJ prosecutors. The theft occurred in April 2023. 

The brothers manipulated the blockchain protocols that authenticate transactions, a process relied upon by Ethereum users. This open-source software and development platform, powered by blockchain technology, uses its cryptocurrency token (ETH) for payments, including tangible goods and services. According to the indictment, over several months, the brothers devised a scheme to illegally access and manipulate private cryptocurrency transactions. They specifically targeted transactions involving maximal extractable value (MEV) software, which 90 per cent of Ethereum users use to validate new transactions before they are added to the blockchain. By altering certain transactions, they redirected the funds to themselves, effectively stealing money from blockchain validators using this software. 

Deputy Attorney General Lisa Monaco described the heist as “technologically sophisticated”, noting planning took months, but execution only took seconds. Furthermore, officials stated that the brothers refused to return the funds and took steps to conceal their identities and launder the stolen money. If convicted, they face up to 20 years in prison for each count. 

This case is the first of its kind. No one has been prosecuted for this crime previously. As technology and the cryptocurrency market continue to evolve, similar cases may become more prevalent. Countries may need to reevaluate and update their laws and regulations to ensure they are adequately equipped to handle these types of crimes. The brothers likely developed their knowledge and skills at MIT, one of the most prestigious universities in the world. Prosecutors allege that they leveraged their education to exploit Ethereum’s process for validating transactions. The technologically sophisticated nature of the heist demonstrates the growing complexity and ingenuity of cybercriminals. 

This incident challenged the long-held belief that blockchain technology is “virtually unhackable”, putting the integrity of blockchain security under scrutiny. It highlights the urgent need for more robust cybersecurity measures. Additionally, this case may prompt increased investment in blockchain security research and development to prevent future vulnerabilities. 

Forecast

• Short-term

  • Regulatory bodies may respond by implementing stricter controls and oversight on cryptocurrency transactions and platforms. This could include new regulations aimed at preventing similar incidents and protecting investors. 

• Long-term

  • Universities and educational institutions may reevaluate computer science and cybersecurity curricula to emphasise ethical considerations and legal implications of technology use. This could prepare and inform students of the importance of using their skills responsibly.