DOJ charges 2 brothers tied to $25M attack on MEV bots last year
The two brothers were arrested in New York and Boston, and they face two courts later Wednesday
Kristi Blokhin/Shutterstock modified by Blockworks
Two brothers accused of orchestrating an attack last year on Ethereum trading bots have been indicted by the US government.
The Department of Justice unsealed charges against Anton Peraire-Bueno and James Peraire-Bueno on Wednesday.
The pair are charged with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering after the brothers allegedly tried to “exploit the very integrity of the Ethereum blockchain to fraudulently obtain approximately $25 million worth of cryptocurrency within approximately 12 seconds.”
Both were arrested on Tuesday and will face judges in Massachusetts and New York.
The April 2023 exploit targeted bots that seek profit by essentially trying to front-run transactions on the network. Maximum extractable value, or MEV, referring to the maximum value that can be obtained during transaction block production beyond rewards and fees.
Read more: Ethereum Validator Goes Rogue, Frontruns MEV Bots for $25M
The Peraire-Bueno brothers sought to “lure” MEV bots from the traders they allegedly targeted by “proposing at least eight specific transactions that…the defendants knew would cause the” targeted bots to include the lure transactions in the bundles, the indictment said. The exploit took advantage of a since-patched code vulnerability in the MEV-Boost software.
“In each of these eight bundles, the victim traders effectively bought substantial amounts of particularly illiquid cryptocurrencies…for approximately $25 million of various stablecoins.”
“Through the Exploit, which is believed to be the very first of its kind, Anton Peraire-Bueno and James Pepaire-Bueno manipulated and tampered with the process and protocols by which transactions are validated and added to the Ethereum blockchain. In doing so, they fraudulently gained access to pending private transactions and used that access to alter certain transactions and obtain their victims’ cryptocurrency,” a DOJ press release said.
To avoid detection, the two tried to conceal their identities through shell companies and private crypto addresses.
Following the attack, the brothers even “transferred the stolen cryptocurrency through a series of transactions designed to conceal the source and ownership of the stolen funds.”
They researched know-your-customer (KYC) procedures online, per the indictment, to learn the KYC standards and extradition procedures. They allegedly also researched the crimes they’d end up being charged with.
“As alleged in today’s indictment, the Peraire-Bueno brothers stole $25 million in Ethereum cryptocurrency through a technologically sophisticated, cutting-edge scheme they plotted for months and executed in seconds,” said Deputy Attorney General Lisa Monaco.
Get the news in your inbox. Explore Blockworks newsletters:
- The Breakdown: Decoding crypto and the markets. Daily.
- 0xResearch: Alpha in your inbox. Think like an analyst.
- Empire: Crypto news and analysis to start your day.
- Forward Guidance: The intersection of crypto, macro and policy.
- The Drop: Apps, games, memes and more.
- Lightspeed: All things Solana.
- Supply Shock: Bitcoin, bitcoin, bitcoin.
