A Paris criminal court has sentenced a former Holograph Foundation employee to five years in prison for illegally minting and stealing 1 billion HLG tokens — worth about $14 million — in a high-profile 2024 crypto exploit that exposed governance and access risks in decentralized protocol operations. What the court decided - On November 6, judges convicted the Ukrainian national, identified in court documents as Vitaly K., of organized fraud, money laundering, criminal conspiracy and illegally interfering with an automated data processing system. He was given a five-year sentence: two years to serve immediately and three years suspended under probation, plus a €600,000 fine. Prosecutors had sought five years behind bars and an €800,000 fine. - Two accomplices were also convicted. One received a two-year sentence (14 months suspended) and an €80,000 fine; the other received a two-year suspended sentence and a €40,000 fine. - The court ordered the three defendants to jointly pay Holograph Foundation €1.15 million for direct financial losses and another €106,800 for other damages. However, judges rejected Holograph’s larger claim for compensation tied to HLG’s market-price decline. The hack and how it unfolded - Between May and August 2024, the defendants — operating from Paris and Roquebrune-Cap-Martin — exploited administrative access to the protocol’s operator contract to change token-creation permissions. That allowed them to mint 1 billion HLG tokens without authorization and move them into a wallet controlled by the main defendant. - The attackers then distributed the stolen tokens across several exchange accounts to obfuscate the trail and liquidate portions of the theft. - The incident followed a June 13, 2024 security breach of Holograph’s operator contract. Holograph later said a former contractor had used administrative rights to inject malicious instructions into the system before executing the exploit. Investigation and arrests - Holograph and blockchain security firm Halborn led contract-level analysis; law enforcement support came from France’s Brigade de Répression du Banditisme, Europol, Italian authorities and Cayman Islands police. - Suspects were arrested in August 2024 during cross-border probes. The main defendant was transferred from Italy to France and held in custody from September; the two accomplices appeared at the Paris trial not in detention. Disputed market-loss claim - Holograph had argued the unauthorized minting contributed to the collapse in HLG’s market price and sought broader compensation for that depreciation. The court found insufficient evidence of a direct causal link, noting HLG’s price had already tumbled before the exploit. - For context, HLG traded near $0.03 in May 2024 and fell to roughly $0.001 by late December. Contemporary reporting valued the June unauthorized mint at about $14.4 million. Reactions and broader implications - Holograph’s lawyer told the court the foundation had largely ceased operating and was preparing for liquidation following the incident. - Defense counsel Robin Binsard welcomed the court’s rejection of the disputed market-value claim, calling it a “fantasy,” and noted the sentence was lighter than prosecutors had requested, possibly allowing his client an early return to freedom. - The case highlights persistent risks around privileged administrative access to smart contracts and operator modules. It underscores the need for robust access controls, multi-party governance for critical contract functions, and rapid coordination between projects and exchanges when unauthorized minting occurs. Takeaway This conviction is a reminder that centralized administrative keys and contract-level privileges can present material attack surfaces in tokenized ecosystems. The cross-border investigation and partial recovery order show law enforcement can pursue complex crypto-enabled frauds, but getting full market-loss restitution remains legally and factually challenging. Read more AI-generated news on: https://app.chaingpt.org/news