- Nearly all of the US$220 million (AU$308 million) in unfrozen assets stolen from Kelp DAO have been laundered, leaving just US$1.7 million (AU$2.38 million) traceable.
- Analysts say the attacker used a combination of Wasabi and Tornado Cash to obscure the movement of funds, reducing recovery prospects.
- Approximately US$71 million (AU$99.4 million) remains frozen while legal proceedings continue and Kelp DAO completes infrastructure changes.
Efforts to recover cryptocurrency stolen from Kelp DAO have suffered a major setback after the attacker successfully laundered almost all of the roughly US$220 million (AU$308 million) in unfrozen assets taken during April’s exploit. Blockchain monitoring data shows only about US$1.7 million (AU$2.38 million) remains traceable.
The exploit on 18 April resulted in the theft of 116,500 rsETH, with total losses estimated at approximately US$293 million (AU$410.2 million). The incident pushed aggregate cryptocurrency hack losses for April to US$630 million (AU$882 million).
According to analysts tracking the movement of funds, the attacker employed a layered laundering strategy. Specter said the assets were bridged into Bitcoin using the Wasabi mixing service before being returned to Ethereum and processed through Tornado Cash. Analysts said this activity greatly reduced the likelihood of recovering the unfrozen assets.
Related: Dimon Declares War on Crypto Bill, Slams Coinbase CEO as Senate Vote Looms
Court Battle Looms Over Remaining Funds
While most of the stolen funds have now moved beyond practical tracing efforts, approximately US$71 million (AU$99.4 million) remains frozen. Those assets were previously earmarked for transfer to an Aave-controlled multi-signature wallet as part of the rsETH recovery process after approval through governance and court proceedings. A further hearing on ownership claims is due to take place in New York.
The exploit also triggered broader security reviews within decentralised finance. In response, Kelp DAO transitioned its rsETH token to Chainlink CCIP and moved away from the LayerZero-powered bridge that it linked to weaknesses in its cross-chain infrastructure.
Related: US Court Freezes Arbitrum Hack Funds, Derails DAO Compensation Plan
Be the first to comment