Two brothers arrested for attacking the Ethereum blockchain and stealing $25 million in cryptocurrency

 

Date: May 15, 2024

Contact: newsroom@ci.irs.gov

Damian Williams, the United States Attorney for the Southern District of New York; Lisa Monaco, the Deputy Attorney General of the United States; and Thomas Fattorusso, the Special Agent in Charge of the New York Field Office of the Internal Revenue Service Criminal Investigation (IRS CI), announced today the unsealing of an indictment charging Anton Peraire-Bueno and James Peraire-Bueno with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering. The charges in the Indictment arise from an alleged novel scheme by the defendants to exploit the very integrity of the Ethereum blockchain to fraudulently obtain approximately $25 million worth of cryptocurrency within approximately 12 seconds. Anton Peraire-Bueno and James Peraire-Bueno were arrested yesterday in Boston, Massachusetts, and New York, New York, respectively, and will be presented this afternoon before U.S. Magistrate Judge Paul G. Levenson for the District of Massachusetts and U.S. Magistrate Judge Valerie Figueredo for the Southern District of New York.

U.S. Attorney Damian Williams said: “Today, my Office indicted two brothers—Anton Peraire-Bueno and James Peraire-Bueno—for conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering, all stemming from their alleged scheme to exploit the Ethereum blockchain and to obtain about $25 million worth of cryptocurrency from it. As we allege, the defendants’ scheme calls the very integrity of the blockchain into question. The brothers, who studied computer science and math at one of the most prestigious universities in the world, allegedly used their specialized skills and education to tamper with and manipulate the protocols relied upon by millions of Ethereum users across the globe. And once they put their plan into action, their heist only took 12 seconds to complete. This alleged scheme was novel and has never before been charged. But as the Indictment makes clear, no matter how sophisticated the fraud or how new the techniques used to accomplish it, the career prosecutors of this Office will be relentless in pursuing people who attack the integrity of all financial systems.”

Deputy Attorney General Lisa Monaco said: “As alleged in today’s indictment, the Peraire-Bueno brothers stole $25 million in Ethereum cryptocurrency through a technologically sophisticated, cutting-edge scheme they plotted for months and executed in seconds. Unfortunately for the defendants, their alleged crimes were no match for Department of Justice prosecutors and IRS agents, who unraveled this first-of-its kind wire fraud and money laundering scheme. As cryptocurrency markets continue to evolve, the Department will continue to root out fraud, support victims, and restore confidence to these markets.”

IRS CI Special Agent in Charge Thomas Fattorusso said: “These brothers allegedly committed a first-of-its-kind manipulation of the Ethereum blockchain by fraudulently gaining access to pending transactions, altering the movement of the electronic currency, and ultimately stealing $25 million in cryptocurrency from their victims. In this case, IRS CI New York’s Cyber Unit simply followed the money. Regardless of the complexity of the case, we continue to lead the effort in financial criminal investigations with cutting-edge technology and good-ole-fashioned investigative work, on and off the blockchain.”

As alleged in the Indictment:[1]

Anton Peraire-Bueno and James Peraire-Bueno are brothers who studied mathematics and computer science at one of the most prestigious universities in the country. Using the specialized skills developed during their education, as well as their expertise in cryptocurrency trading, Anton Peraire-Bueno and James Peraire-Bueno exploited the very integrity of the Ethereum blockchain in order to fraudulently obtain approximately $25 million worth of cryptocurrency from victim cryptocurrency traders (the “Exploit”). Through the Exploit, which is believed to be the very first of its kind, Anton Peraire-Bueno and James Peraire-Bueno manipulated and tampered with the process and protocols by which transactions are validated and added to the Ethereum blockchain. In doing so, they fraudulently gained access to pending private transactions and used that access to alter certain transactions and obtain their victims’ cryptocurrency. Once the defendants stole their victims’ cryptocurrency, they rejected requests to return the stolen cryptocurrency and took numerous steps to hide their ill-gotten gains.

Anton Peraire-Bueno and James Peraire-Bueno meticulously planned the Exploit over the course of several months. Among other things, they learned the trading behaviors of the victim traders whose cryptocurrency they ultimately stole. As they planned the Exploit, they also took numerous steps to conceal their identities and lay the groundwork to conceal the stolen proceeds, including by setting up shell companies and using multiple private cryptocurrency addresses and foreign cryptocurrency exchanges. After the Exploit, the defendants transferred the stolen cryptocurrency through a series of transactions designed to conceal the source and ownership of the stolen funds.

Throughout the planning, execution, and aftermath of the Exploit, Anton Peraire-Bueno and James Peraire-Bueno also searched online for information about, among other things, how to carry out the Exploit, ways to conceal their involvement in the Exploit, cryptocurrency exchanges with limited “know your customer” procedures that they could use to launder their criminal proceeds, attorneys with expertise in cryptocurrency cases, extradition procedures, and the very crimes charged in this Indictment.

Anton Peraire-Bueno of Boston, Massachusetts, and James Peraire-Bueno of New York, New York, are charged with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering, each of which carries a maximum sentence of 20 years in prison.

The statutory maximum sentences in this case are prescribed by Congress and are provided here for informational purposes only, as any sentencing of the defendants will be determined by a judge.

Mr. Williams praised the investigative work of the IRS-CI New York’s Cyber Investigations Unit. Mr. Williams also acknowledged the assistance of the U.S. Customs and Border Protection and the New York City Police Department.

This case is being handled by the Office’s Complex Frauds and Cybercrime Unit. Assistant U.S. Attorneys Rushmi Bhaskaran and Danielle Kudla are in charge of the prosecution.

The allegations in the Indictment are merely accusations, and the defendants are presumed innocent unless and until proven guilty.

CI is the criminal investigative arm of the IRS, responsible for conducting financial crime investigations, including tax fraud, narcotics trafficking, money-laundering, public corruption, healthcare fraud, identity theft and more. CI special agents are the only federal law enforcement agents with investigative jurisdiction over violations of the Internal Revenue Code, obtaining a more than a 90 percent federal conviction rate. The agency has 20 field offices located across the U.S. and 12 attaché posts abroad.


[1] As the introductory phrase signifies, the entirety of the text of the Indictment, and the description of the Indictment set forth herein, constitute only allegations, and every fact described should be treated as an allegation.