KelpDAO Says Recovery Efforts Advance After Hackers Laundered $175 Million in ETH Into BTC

KelpDAO Says Recovery Efforts Advance After Hackers Laundered $175 Million in ETH Into BTC

According to KelpDAO, recovery talks are progressing after attackers laundered stolen funds across Ethereum, Arbitrum, Bitcoin and Tron-based USDT, while the Arbitrum Security Council froze part of the assets and ZachXBT traced flows through THORChain and Umbra.

BTC
ETH
USDT

Summary

KelpDAO said on April 23 that recovery discussions were progressing after hackers laundered $175 million in ETH into BTC. Related reporting described the post-exploit laundering through multiple routes and asset types, including funds moved from Ethereum to Arbitrum and into Tron-based USDT, as well as flows traced by ZachXBT through THORChain and Umbra. ZachXBT also reported that North Korea-linked TraderTraitor began laundering KelpDAO stolen funds about three hours after the Arbitrum Security Council froze 37,000 ETH worth about $71 million, with roughly 99% of the traced flow going through THORChain. THORChain’s daily volume rose to $211 million, generating about $189,000 in fees, while tracked Bitcoin-side funds reached about 442 BTC worth $33 million across more than 400 addresses. The reports present different totals for the exploit and laundering path, including nearly $290 million tied to rsETH, about $29 million cited in ZachXBT’s earlier tracing, and KelpDAO’s later reference to $175 million in ETH laundered into BTC, so those discrepancies remain part of the historical record.

Terms & Concepts
  • THORChain: A cross-chain liquidity protocol that lets users swap assets across different blockchains without using a centralized exchange.
  • Arbitrum Security Council: An emergency governance body tied to the Arbitrum network that can take rapid action in critical situations, including helping freeze funds linked to an exploit.
  • rsETH: A crypto asset referenced in the KelpDAO exploit and tied to the stolen funds described in the reports.