律动BlockBeats|Jun 02, 2026 04:28
[Kelp DAO Hacker Has Nearly Completed Money Laundering, Approximately $220 Million in Unfrozen Funds Almost Entirely Out of Tracking Range]
BlockBeats News, June 2: Of the approximately $292 million stolen in the April Kelp DAO cross-chain bridge attack, about $220 million has been nearly fully laundered, with only around $71 million in ETH frozen. The attacker's original address now holds just about $1.7 million in assets. On-chain analysis reveals that the attacker has conducted multiple rounds of cross-chain and coin-mixing operations using privacy tools such as THORChain, Wasabi, Tornado Cash, and Umbra, rendering most of the funds untraceable.
Investigative agencies have previously attributed this attack to the North Korean hacker group Lazarus Group (TraderTraitor/UNC4899). One day after the attack, the hacker split approximately 75,700 ETH (valued at around $175 million at the time) into multiple new addresses, cross-chained them to the Bitcoin network via THORChain, and then used tools like Wasabi CoinJoin and Tornado Cash for coin-mixing. During this period, the related fund flows temporarily drove THORChain's single-day trading volume to soar to $394 million, more than ten times the normal level.
Currently, the only asset with a relatively high likelihood of recovery is the approximately 30,766 ETH (around $71 million) frozen by the Arbitrum Security Council. However, this portion of the assets has become entangled in new legal disputes. The U.S. District Court for the Southern District of New York previously issued a restraining order to temporarily freeze these funds, as some families of North Korean terrorism victims are seeking to apply for the forfeiture of these assets through legal proceedings to enforce compensation judgments. [Original Link]
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink