PeckShield Says KelpDAO Attacker Moved 75,700 ETH to Two New Wallets
According to ZachXBT and PeckShield, wallets tied to the KelpDAO attack continue to move funds, including transfers through Thorchain and Umbra after an earlier 75,700 ETH shift.
BTC
ETH
RUNE
Fact Check
The claim has two parts. First, the statement that PeckShield said the KelpDAO attacker moved 75,700 ETH to two new wallets is directly supported by the BlockBeats item titled '派盾：KelpDAO 攻击者已将75,700枚ETH转移至2个新地址 - BlockBeats', which attributes the observation to PeckShield and gives the exact amount and destination count. Second, the claim that ZachXBT and PeckShield reported continued fund movements through THORChain and Umbra is supported in part by Odaily's 'ZachXBT ： KelpDAO 相关攻击资金已开始跨链至比特币网络', which says ZachXBT reported approximately $1.5 million moved via THORChain and approximately $78,000 via Umbra. However, the exact phrasing 'after an earlier 75,700 ETH shift' appears to synthesize two separate reports rather than quote one primary source directly. Because no direct PeckShieldAlert or ZachXBT original post was retrieved in this run, the evidence is good but not ideal. Overall the claim is likely true, with moderate confidence.
- Reference:
Summary
Wallets linked to the KelpDAO attack continued moving funds after PeckShield reported that 75,700 ETH had been sent to two new addresses on April 21. ZachXBT said about $1.5 million was later bridged from Ethereum mainnet to Bitcoin through Thorchain, while another roughly $78,000 was transferred via Umbra. ZachXBT also said the attack address’s initial funds came from Tornado Cash, adding detail on the source and laundering routes used in the post-attack movements.
Terms & Concepts
- ETH: The native cryptocurrency of the Ethereum blockchain, used for transactions, fees, and smart contract operations.
- Thorchain: A cross-chain liquidity protocol that lets users swap or move assets across different blockchains without centralized intermediaries.
- Tornado Cash: A crypto mixing protocol designed to obscure the origin and destination of blockchain transactions by pooling and redistributing funds.