Key Takeaways:
After Arbitrum froze 30,766 ETH ($71M), the KelpDAO exploiter moved 75,701 ETH ($175M) to the Ethereum mainnet. Peckshield confirmed the attacker is routing stolen funds to bitcoin via Thorchain, Umbra Cash, and Chainflip. Lazarus Group’s KelpDAO haul adds to $600M+ in DeFi losses over three weeks as TVL falls 25%. Arbitrum Freeze Triggers Immediate ResponseKelpDAO acknowledged the action as well, thanking the Security Council and noting the team had worked closely with the council and ecosystem stakeholders over two days to execute the intervention.
The freeze recovered approximately 29% of the ether the exploiter had accumulated across chains following the original breach.
Attacker Empties Address, Routes Funds Toward Bitcoin
