• About Us
  • Contact Us
  • Editorial Calendar
  • Careers
  • The Cyber Express by Cyble Vulnerability Disclosure Policy
  • Cyble Trust Portal
The Cyber Express
  • MagazineDownload
  • Firewall Daily
    • All
    • Bug Bounty & Rewards
    • Dark Web News
    • Data Breach News
    • Hacker News
    • Ransomware News
    • Vulnerabilities
    Satellite Receiver, IDC, Vulnerabilities

    A Satellite Receiver Trusted by Pentagon, ESA Has More Than 20 Security Flaws — and the Maker Never Responded

    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Cyber Warfare Headquarters, Iran, Iran Cyber Warfare Headquarters, Cyber Warfare, IRGC

    Israel Claims it ‘Struck’ Iran’s Cyber Warfare Headquarters

    Microsoft certificate

    Florida Software Distributor Sentenced for Illicit Microsoft COA Trafficking

    Operation LeakBase

    FBI and Europol Dismantle LeakBase Cybercrime Forum With 142,000 Users

    Middle East cyberwar

    Cyber-Kinetic Warfare Escalates as Iran, US, and Israel Clash Across Military and Digital Fronts

    mandatory cybersecurity requirements

    Home Routers in Singapore Must Meet Higher Security Standards by 2027

    UH Cancer Center cyberattack

    University of Hawaii Cancer Center Breach Exposes SSNs of 87,000+ Participants

    Ring camera doorbells

    Ring Camera Doorbell Ad Triggers Privacy Concerns and Public Criticism in America

    Trending Tags

    • blackbyte ransomware
    • Ransomware
    • lapsus$ ransomware
    • Apple
    • Apple vulnerability
  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Stolen Credit Card Data Trafficking

    Chilean National Extradited to U.S. Over Stolen Credit Card Data Trafficking Scheme

    cybersecurity firewall

    Vietnam Announces National Cybersecurity Firewall Plan Under New Digital Governance Law

    government cyber security

    UK Tightens Government Cyber Security After Cutting Critical Vulnerabilities by 75%

    iphone, ipad, apple devices

    Apple Devices Become First Consumer Products Cleared for NATO Classified Data—But Questions Remain

    space cyber security

    India Strengthens Space Cyber Security with New CERT-In and SIA-India Framework

    CISCO SD-WAN, Cisco, SD-WAN, CISA, ASD, Zero-Day

    Hackers Exploited Cisco SD-WAN Zero-Day for Three Years Before Detection

    age verification technologies

    FTC Clarifies COPPA Stance, Backs Age Verification Technologies for Platforms

    scam centers in Southeast Asia

    Scam Centers in Southeast Asia Drive Billion-Dollar Losses: FBI

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
    • All
    • How to
    • What is
    Google Chrome

    How to Remove Saved Passwords From Google Chrome (And Why You Should)

    DPDP Rules, Cyble, DPDP Act, Cyble Vantage

    How Cyble’s Front-Row Vantage Can Help You in Complying to India’s DPDP Act

    Cybersecurity Countries

    The Top 8 Countries Leading the Cyber Defense Race in 2025

    link building

    The Link Building Secrets Your Competitors Don’t Want You to Know

    Supply Chain Attack

    Supply Chain Resilience and Physical Security: Lessons for 2025

    Healthcare cybersecurity trends of 2024

    Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

    CEO's Guide to Take-Down Services

    Shield Your Organization: CEO’s Perspective on Take-Down Services

    Azure sign-in Microsoft

    Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

    Signal Proxy, Signal, Signal Ban in Russia, Signal Ban in Venezuela, Bypass Signal Ban, How to Activate Signal Proxy, Signal Proxy Server

    How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela

  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Terrorist Cyberattacks, UAE Cyber Security Council

    UAE Blocked AI-Powered Terrorist Cyberattacks Targeting Critical Infrastructure

    Eurail Breach, Eurail

    Eurail Breach Escalates as Stolen Passport Data and IBANs Surface on Dark Web for Sale

    Discord teen-by-default settings

    Discord Introduces Stronger Teen Safety Controls Worldwide

    The Cyber Express cybersecurity roundup

    The Cyber Express Weekly Roundup: FortiOS Exploits, Ransomware, Hacktivist Surge, and EU Telecom Rules

    Nicole Ozer appointment

    Nicole Ozer Joins CPPA to Drive Privacy and Digital Security Initiatives

    National Security Agency (NSA) appointment

    NSA Appoints Timothy Kosiba to Oversee Strategy and Cybersecurity Operations

    Shinhan Card data breach

    South Korea’s Shinhan Card Data Breach Affects 192,000 Merchants

    Cyble's Beenu-Recognized-by-ET-Edge-as-an-Impactful-CEO-2025_

    Beenu Arora, CEO & Co-Founder of Cyble, Recognized by ET Edge as an Impactful CEO 2025

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board
No Result
View All Result
  • MagazineDownload
  • Firewall Daily
    • All
    • Bug Bounty & Rewards
    • Dark Web News
    • Data Breach News
    • Hacker News
    • Ransomware News
    • Vulnerabilities
    Satellite Receiver, IDC, Vulnerabilities

    A Satellite Receiver Trusted by Pentagon, ESA Has More Than 20 Security Flaws — and the Maker Never Responded

    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Cyber Warfare Headquarters, Iran, Iran Cyber Warfare Headquarters, Cyber Warfare, IRGC

    Israel Claims it ‘Struck’ Iran’s Cyber Warfare Headquarters

    Microsoft certificate

    Florida Software Distributor Sentenced for Illicit Microsoft COA Trafficking

    Operation LeakBase

    FBI and Europol Dismantle LeakBase Cybercrime Forum With 142,000 Users

    Middle East cyberwar

    Cyber-Kinetic Warfare Escalates as Iran, US, and Israel Clash Across Military and Digital Fronts

    mandatory cybersecurity requirements

    Home Routers in Singapore Must Meet Higher Security Standards by 2027

    UH Cancer Center cyberattack

    University of Hawaii Cancer Center Breach Exposes SSNs of 87,000+ Participants

    Ring camera doorbells

    Ring Camera Doorbell Ad Triggers Privacy Concerns and Public Criticism in America

    Trending Tags

    • blackbyte ransomware
    • Ransomware
    • lapsus$ ransomware
    • Apple
    • Apple vulnerability
  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Stolen Credit Card Data Trafficking

    Chilean National Extradited to U.S. Over Stolen Credit Card Data Trafficking Scheme

    cybersecurity firewall

    Vietnam Announces National Cybersecurity Firewall Plan Under New Digital Governance Law

    government cyber security

    UK Tightens Government Cyber Security After Cutting Critical Vulnerabilities by 75%

    iphone, ipad, apple devices

    Apple Devices Become First Consumer Products Cleared for NATO Classified Data—But Questions Remain

    space cyber security

    India Strengthens Space Cyber Security with New CERT-In and SIA-India Framework

    CISCO SD-WAN, Cisco, SD-WAN, CISA, ASD, Zero-Day

    Hackers Exploited Cisco SD-WAN Zero-Day for Three Years Before Detection

    age verification technologies

    FTC Clarifies COPPA Stance, Backs Age Verification Technologies for Platforms

    scam centers in Southeast Asia

    Scam Centers in Southeast Asia Drive Billion-Dollar Losses: FBI

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
    • All
    • How to
    • What is
    Google Chrome

    How to Remove Saved Passwords From Google Chrome (And Why You Should)

    DPDP Rules, Cyble, DPDP Act, Cyble Vantage

    How Cyble’s Front-Row Vantage Can Help You in Complying to India’s DPDP Act

    Cybersecurity Countries

    The Top 8 Countries Leading the Cyber Defense Race in 2025

    link building

    The Link Building Secrets Your Competitors Don’t Want You to Know

    Supply Chain Attack

    Supply Chain Resilience and Physical Security: Lessons for 2025

    Healthcare cybersecurity trends of 2024

    Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

    CEO's Guide to Take-Down Services

    Shield Your Organization: CEO’s Perspective on Take-Down Services

    Azure sign-in Microsoft

    Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

    Signal Proxy, Signal, Signal Ban in Russia, Signal Ban in Venezuela, Bypass Signal Ban, How to Activate Signal Proxy, Signal Proxy Server

    How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela

  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Terrorist Cyberattacks, UAE Cyber Security Council

    UAE Blocked AI-Powered Terrorist Cyberattacks Targeting Critical Infrastructure

    Eurail Breach, Eurail

    Eurail Breach Escalates as Stolen Passport Data and IBANs Surface on Dark Web for Sale

    Discord teen-by-default settings

    Discord Introduces Stronger Teen Safety Controls Worldwide

    The Cyber Express cybersecurity roundup

    The Cyber Express Weekly Roundup: FortiOS Exploits, Ransomware, Hacktivist Surge, and EU Telecom Rules

    Nicole Ozer appointment

    Nicole Ozer Joins CPPA to Drive Privacy and Digital Security Initiatives

    National Security Agency (NSA) appointment

    NSA Appoints Timothy Kosiba to Oversee Strategy and Cybersecurity Operations

    Shinhan Card data breach

    South Korea’s Shinhan Card Data Breach Affects 192,000 Merchants

    Cyble's Beenu-Recognized-by-ET-Edge-as-an-Impactful-CEO-2025_

    Beenu Arora, CEO & Co-Founder of Cyble, Recognized by ET Edge as an Impactful CEO 2025

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board
No Result
View All Result
The Cyber Express
No Result
View All Result
Home Cyber News

Terraform Labs Co-Founder Kwon Faces U.S. Court Over $40 Billion Fraud Scheme

Extradited from Montenegro, Kwon Accused of Market Manipulation and Deceptive Practices Leading to Cryptocurrency Crash

Samiksha Jain by Samiksha Jain
January 6, 2025
in Cyber News, Firewall Daily
0
cryptocurrency

Source: Pixabay

710
SHARES
3.9k
VIEWS
Share on LinkedInShare on Twitter

Do Hyeong Kwon, the co-founder and former CEO of Terraform Labs, was extradited from Montenegro and appeared in federal court in Manhattan, where he faced charges related to widespread fraud that led to the collapse of Terraform’s cryptocurrencies, resulting in billions in losses for investors. The cryptocurrency case, which has drawn international attention, centers around Kwon’s alleged manipulation of digital assets and his efforts to cover up the scale of his fraudulent activities.

Kwon, 33, arrived in the United States on December 31, 2024, and appeared before U.S. Magistrate Judge Robert W. Lehrburger for his initial court hearing. His case is assigned to U.S. District Court Judge John P. Cronan, with the next conference scheduled for January 8, 2025. Kwon’s extradition marks a significant victory for U.S. authorities, who have long pursued his arrest following the high-profile crash of Terraform’s cryptocurrencies in 2022.

Attorney General Merrick B. Garland commented on the case, saying, “Do Hyeong Kwon will now be held accountable in an American courtroom for his elaborate schemes involving Terraform’s cryptocurrencies, which resulted in over $40 billion in investor losses.” He highlighted the Justice Department’s success in securing Kwon’s extradition, despite his alleged attempts to evade prosecution, including laundering the proceeds of his crimes and attempting to use a fraudulent passport to travel to a country without an extradition treaty with the United States.

The charges against Kwon stem from his involvement in deceptive practices aimed at inflating the value of Terraform’s digital assets, including its popular cryptocurrency tokens, TerraUSD (UST) and LUNA. The unsealed superseding indictment reveals that Kwon orchestrated a series of misleading actions from at least 2018 through 2022, deliberately deceiving investors about the stability and functionality of Terraform’s products. His false representations about the blockchain technology behind Terraform’s cryptocurrencies, as well as his role in manipulating the market, have been central to the fraud allegations.

Federal prosecutors claim that Kwon’s actions caused the market value of Terraform’s assets to soar to unsustainable levels. At its peak in the spring of 2022, the combined market value of UST and LUNA exceeded $50 billion. However, Kwon’s fraudulent activities—ranging from misleading investors about the nature of Terraform’s stablecoin to market manipulation and money laundering—ultimately led to a dramatic crash. By May 2022, the failure of Terraform’s algorithmic stablecoin, TerraUSD, caused a catastrophic collapse, erasing more than $40 billion in investor funds.

Key Misrepresentations in Kwon’s Fraudulent Schemes

Among the most serious allegations in the indictment are Kwon’s misrepresentations about the core features of Terraform’s stablecoin protocol. Terraform’s Terra Protocol, which was supposed to maintain UST’s value through an algorithm, failed to perform as promised. In response, Kwon allegedly reached an agreement with a high-frequency trading firm to artificially prop up the UST peg at $1. This action, intended to deceive investors, ultimately contributed to the downfall of Terraform’s financial system.

report-ad-banner

Other fraudulent activities outlined in the indictment include Kwon’s false claims about the Luna Foundation Guard (LFG), a body that Kwon misrepresented as an independent entity responsible for managing billions of dollars in financial reserves. In reality, Kwon controlled both Terraform and LFG, and he is accused of embezzling significant amounts from LFG to launder funds through complex financial transactions.

The indictment also describes Kwon’s role in manipulating the Mirror Protocol, an investing platform that claimed to allow users to create and trade synthetic versions of stocks. Kwon allegedly used automated bots to manipulate the prices of synthetic assets and inflated user metrics to deceive investors into believing the platform was more successful than it truly was.

Kwon’s fraudulent actions also extended to his claims about Terraform’s involvement with the Korean payment processing app Chai, which Kwon falsely presented as using Terraform’s blockchain to process billions of dollars in transactions. In reality, Chai used traditional financial processing systems, not the Terra blockchain.

Efforts to Evade Justice and Global Pursuit

Kwon’s attempts to flee justice came to a head when he was arrested in Montenegro in March 2023 while attempting to use a fraudulent passport to travel to a country that lacked an extradition agreement with the U.S. At the time of his arrest, Kwon was already facing charges from the Southern District of New York related to commodities fraud, securities fraud, and wire fraud.

The indictment charges Kwon with multiple counts of commodities fraud, securities fraud, wire fraud, conspiracy to commit fraud, and money laundering. If convicted on all charges, Kwon faces a maximum sentence of up to 130 years in prison. The U.S. authorities are determined to ensure that Kwon is held accountable for the damage caused to investors worldwide.

FBI’s Role in Cryptocurrency Fraud Case Investigation

James E. Dennehy, Assistant Director in Charge of the FBI New York Field Office, underscored the FBI’s commitment to pursuing fraudsters, even when they attempt to evade justice internationally. “For at least four years, Kwon allegedly played puppet master to maintain this crafted illusion and ensnare investors,” Dennehy said. The FBI, which worked closely with international partners, will continue to pursue individuals who engage in fraudulent financial practices, regardless of where they attempt to hide.

Legal Implications and Future Proceedings

Kwon is facing charges on several counts, each with severe penalties. For each count of commodities fraud, securities fraud, and wire fraud, he faces up to 20 years in prison. The charges also include a conspiracy charge for which he faces up to five years in prison and a money laundering charge with a penalty of up to 20 years in prison. Given the scope of the fraud and the global impact on investors, the legal proceedings in Kwon’s case are expected to be highly scrutinized in the coming months.

A federal judge will determine Kwon’s sentencing based on U.S. Sentencing Guidelines and other statutory factors. His case highlights the growing concern over the potential for manipulation and fraud in the emerging cryptocurrency market, as well as the importance of enforcing transparency and accountability in blockchain technologies.

The $40 billion loss to investors has left many individuals and organizations grappling with the financial fallout from Terraform’s collapse. With Kwon now facing U.S. justice, the case may set a significant precedent for holding cryptocurrency executives accountable for fraudulent activities that have widespread economic consequences.

Share this:

  • Share on LinkedIn (Opens in new window) LinkedIn
  • Share on Reddit (Opens in new window) Reddit
  • Share on X (Opens in new window) X
  • Share on Facebook (Opens in new window) Facebook
  • More
  • Email a link to a friend (Opens in new window) Email
  • Share on WhatsApp (Opens in new window) WhatsApp

Related

Tags: cryptocurrency marketDo Hyeong KwonFBIKwon's Fraudulent Schemesmanipulation of digital assetsMoney LaunderingTerraform LabsTerraform’s cryptocurrenciesThe Cyber ExpressThe Cyber Express NewsU.S. Sentencing Guidelines
Previous Post

Lessons for Everyone to Learn from My Personal LinkedIn Account Takeover Experience

Next Post

India Releases Draft Data Protection Rules for Public Consultation

Next Post
Draft Data Protection Rule, DPDP, DPDP Act, Digital Personal Data Protection

India Releases Draft Data Protection Rules for Public Consultation

Threat Landscape Reports 2025

❮ ❯
Cyble-Vision


Follow Us On Google News

Latest Cyber News

Satellite Receiver, IDC, Vulnerabilities
Vulnerabilities

A Satellite Receiver Trusted by Pentagon, ESA Has More Than 20 Security Flaws — and the Maker Never Responded

March 6, 2026
INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure
Ransomware News

INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

March 6, 2026
Cyber Warfare Headquarters, Iran, Iran Cyber Warfare Headquarters, Cyber Warfare, IRGC
Cyber Warfare

Israel Claims it ‘Struck’ Iran’s Cyber Warfare Headquarters

March 5, 2026
Microsoft certificate
Firewall Daily

Florida Software Distributor Sentenced for Illicit Microsoft COA Trafficking

March 5, 2026

Categories

Web Stories

Do This on Telegram, Your Bank Account Will Become Zero
Do This on Telegram, Your Bank Account Will Become Zero
If You Install the iOS 18 Beta, Your iPhone Could Be Hacked
If You Install the iOS 18 Beta, Your iPhone Could Be Hacked
Cricket World Cup Ticketing Systems Under Cybersecurity
Cricket World Cup Ticketing Systems Under Cybersecurity
Cyber Threats and Online Ticket Scams During the NBA Finals
Cyber Threats and Online Ticket Scams During the NBA Finals
Biometric Data Security: Protecting Sensitive Information
Biometric Data Security: Protecting Sensitive Information

About

The Cyber Express

#1 Trending Cybersecurity News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

 

Contact

For editorial queries: [email protected]

For marketing and Sales: [email protected]

 

Quick Links

  • About Us
  • Contact Us
  • Editorial Calendar
  • Careers
  • The Cyber Express by Cyble Vulnerability Disclosure Policy
  • Cyble Trust Portal

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome,
Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

 

Headquarters:

The Cyber Express LLC
10080 North Wolfe Road, Suite SW3-200, Cupertino, CA, US 95014

 

India Office:

Cyber Express Media Network
HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

  • Privacy Statement
  • Terms of Use
  • Write For Us

© 2026 The Cyber Express - Cybersecurity News and Magazine.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

No Result
View All Result
  • Magazine
  • Firewall Daily
  • Essentials
    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board

© 2026 The Cyber Express - Cybersecurity News and Magazine.

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?
-
00:00
00:00

Queue

Update Required Flash plugin
-
00:00
00:00
Do This on Telegram, Your Bank Account Will Become Zero If You Install the iOS 18 Beta, Your iPhone Could Be Hacked Cricket World Cup Ticketing Systems Under Cybersecurity Cyber Threats and Online Ticket Scams During the NBA Finals Biometric Data Security: Protecting Sensitive Information