A wallet associated with the attacker behind the Indexed Finance and Kyber Network hacks has reactivated, selling more than $2 million in tokens after a yearlong dormancy, according to data tracked by Lookonchain.

Over the past eight hours, the wallet offloaded 226,961 UNI worth about $1.3 million, 33,215 LINK valued at $410,000, 845,806 CRV totaling $328,000, and more than 5 YFI worth $17,500.

The 2021 Indexed Finance hack and the late-2023 KyberSwap exploit were allegedly orchestrated by Andean Medjedovic, who stole about $65 million in crypto from the two platforms.

A federal grand jury indictment unsealed in February 2025 in the Eastern District of New York charged him with wire fraud, computer intrusion, extortion, and money laundering tied to the DeFi thefts.

Through 2025, Medjedovic remains at large despite joint efforts involving US and international authorities.