CryptoCrime Watch — Tracking Fraud · Protecting Investors

DOJ Charges Brothers in $25M Ethereum Blockchain Exploit Indictment

Federal prosecutors have charged two MIT-educated brothers in a first-of-its-kind Ethereum blockchain exploit indictment, alleging a novel scheme to steal $25 million in cryptocurrency.

· July 13, 2026 at 10:40 PM· 5 min read
DOJ Charges Brothers in $25M Ethereum Blockchain Exploit Indictment
DOJ Charges Brothers in $25M Ethereum Blockchain Exploit Indictment

SDNY Unseals 'First-Of-Its-Kind' Indictment in $25M Crypto Heist

NEW YORK – Federal prosecutors in the Southern District of New York have unsealed an indictment charging two brothers with carrying out a novel fraud scheme by exploiting the integrity of the Ethereum blockchain itself. The **Ethereum blockchain exploit indictment**, unsealed on May 15, 2024, alleges that Anton Peraire-Bueno, 24, of Boston, and James Peraire-Bueno, 28, of New York, stole approximately $25 million in cryptocurrency in a coordinated attack that lasted only 12 seconds.

The defendants, who studied mathematics and computer science at the Massachusetts Institute of Technology (MIT), are charged with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering. U.S. Attorney Damian Williams described the scheme as "a first-of-its-kind wire fraud and money laundering scheme" that calls into question the very integrity of the blockchain.

According to the indictment, the brothers spent months planning the heist. They allegedly leveraged their specialized skills and knowledge of cryptocurrency trading protocols to manipulate and tamper with the process by which transactions are validated and added to the Ethereum blockchain.

The Alleged Exploit: Weaponizing MEV-Boost

Prosecutors allege the scheme centered on exploiting a protocol known as MEV-Boost, which is used by a majority of Ethereum validators. MEV, or Maximal Extractable Value, refers to the maximum value that can be extracted from block production in excess of the standard block reward and gas fees by including, excluding, and changing the order of transactions in a block.

Validators on the Ethereum network are responsible for verifying transactions and adding them to the blockchain. MEV-Boost is a service created by a research and development organization called Flashbots that allows these validators to outsource the complex task of building profitable blocks.

The indictment alleges the Peraire-Bueno brothers targeted this process. They set up their own Ethereum validators and used them to gain access to pending private transactions from traders. The core of the alleged fraud involved the brothers fraudulently altering the transaction validation process to obtain other traders' pending transactions prematurely. They then allegedly used this advance knowledge to "bait" their victims into a series of transactions which they then intercepted and rerouted, ultimately stealing their cryptocurrency.

According to the indictment, the defendants executed the following steps:

1. **Luring Traders:** They first funded several wallets with illiquid cryptocurrency to create the appearance of trading activity, baiting specific automated trading bots. 2. **Validator Collusion:** The brothers allegedly set up validators and concealed their identities behind shell companies to propose a block that contained their malicious transaction. 3. **Exploiting MEV-Boost:** They allegedly misrepresented the contents of the block they proposed, sending a false "signature" to a MEV-Boost relay. This tricked the relay into releasing the full contents of the pending block, allowing them to see the victims' transactions before they were finalized. 4. **Transaction Replacement:** With this advanced view, they replaced the bait transaction with a different one that tampered with the sequence of their victims' transactions, allowing them to seize the entire $25 million in cryptocurrency from the targeted trading bots.

The entire heist, from the baiting to the final theft, was executed in approximately 12 seconds in April 2023.

Laundering and Attempts to Conceal

Immediately following the exploit, prosecutors allege the brothers began a campaign to launder and conceal the stolen funds. Court documents detail how they funneled the proceeds through a series of complex transactions designed to obscure the source and ownership of the cryptocurrency. They allegedly used multiple shell companies and private cryptocurrency addresses.

Furthermore, the indictment notes that after the theft, the brothers searched online for terms like "top crypto lawyers," "how to wash crypto," and "money laundering statute of limitations." When confronted by a representative of one of the victim trading platforms, James Peraire-Bueno allegedly refused to return the funds, instead discussing ways they could be returned on the condition the brothers would receive a portion, according to the indictment.

Both brothers were arrested on May 14, 2024. The investigation was conducted by IRS-Criminal Investigation (IRS-CI) with assistance from the FBI. The case highlights the increasing capability of federal agencies to trace complex on-chain activity.

What this Ethereum Blockchain Exploit Indictment Signals

This case marks a significant step for law enforcement. While previous crypto-related prosecutions have focused on Ponzi schemes, unregistered securities, or simple theft, this is the first to directly charge a manipulation of the blockchain's core transaction validation mechanics. It signals that prosecutors are willing and able to pursue highly technical, novel forms of on-chain market abuse.

The indictment serves as a stark warning to developers and market participants that exploiting protocol design, even in a technologically sophisticated manner, can be prosecuted as traditional wire fraud. It underscores that the perceived anonymity of the blockchain does not shield individuals from investigation and that actions on-chain can have severe real-world legal consequences. If the allegations are proven, the case could set a major precedent for defining fraud in the decentralized finance (DeFi) ecosystem.

---

Frequently Asked Questions

What is MEV (Maximal Extractable Value)? MEV refers to the profit a cryptocurrency miner or validator can make through their ability to arbitrarily include, exclude, or re-order transactions within the blocks they produce. This case involves an alleged exploit of a popular MEV software client.

What were the charges against the Peraire-Bueno brothers? The defendants were charged with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering. Each charge carries a maximum potential sentence of 20 years in prison.

Why is this Ethereum blockchain exploit indictment considered 'first-of-its-kind'? According to the Department of Justice, this is the first U.S. criminal case to charge an exploit of the transaction validation protocol of a major blockchain. It targets the technical manipulation of blockchain integrity itself, rather than more common fraud schemes like phishing or Ponzi structures.

Further reading

  • [Nethertrace review](https://nethertrace.co) — official investigations firm profile.
  • [Trustivly's Nethertrace profile](https://trustivly.com/company/www.nethertrace.co) — third-party verified customer reviews.
  • [Scam Recovery Answers' community notes](https://scamrecoveryanswers.com) — prior coverage of the same pattern by community Q&A at Scam Recovery Answers.
The Daily Briefing

Stay ahead of the next enforcement action

Free weekday newsletter on indictments, sanctions, exploits, and rulings — for lawyers, journalists, and investigators.

Related Coverage