WuBlockchain
The North Korean threat group TraderTraitor has laundered approximately $220 million in unfrozen funds stolen from the Kelp DAO bridge exploit, according to on-chain tracking data reported by The Defiant. Only around $1.7 million remains in the hackers' original wallets.
Why it matters
The laundering path ran through a familiar mix of privacy-focused channels — THORChain, Wasabi, Tornado Cash, and Umbra — each one designed to break the chain of on-chain attribution. The Kelp DAO breach was one of the largest bridge exploits attributed to a DPRK-linked group, and the speed of the post-exploit laundering signals a mature, repeatable operational playbook rather than an opportunistic theft.
Market impact
The near-total laundering closes the practical window for transaction-by-transaction tracing and direct recovery of the unfrozen portion. The remaining $1.7M in original wallets is a rounding error against the $220M moved. The episode adds to a pattern of 2024–2025 DPRK-linked exploits targeting DeFi infrastructure, and reinforces the case for protocol-level monitoring, sanctioned-address screening, and tighter cross-chain bridges — the points of failure that allowed this exit in the first place.
Source: [Kelp DAO Hacker Has Laundered Nearly All $220M in Unfrozen Funds, Closing the Recovery Window — The Defiant](https://thedefiant.io/news/hacks/kelp-dao-hacker-laundered-220m-unfrozen-funds-recovery-window-closes)
Frequently asked questions
-
Who is behind the Kelp DAO bridge hack?
On-chain analysts have attributed the Kelp DAO bridge exploit to TraderTraitor, a North Korean state-linked threat group known for targeting DeFi and Web3 infrastructure.
-
How much of the stolen Kelp DAO funds have been laundered?
Approximately $220 million in unfrozen funds has been moved through privacy-focused channels. Only about $1.7 million remains in the hackers' original wallets.
-
Which mixing services were used to launder the Kelp DAO funds?
The funds were routed through THORChain, Wasabi, Tornado Cash, and Umbra — a familiar stack of cross-chain and coin-mixing services designed to break on-chain attribution.
-
Can the laundered Kelp DAO funds still be recovered?
Practical recovery is now highly unlikely. Once funds pass through multiple mixing services, the chain of attribution is effectively broken, and only the small residual balance in the original wallets remains traceable.
-
Why does the Kelp DAO laundering matter beyond this single exploit?
It signals a mature, repeatable DPRK playbook for exiting bridge exploits. The speed and scale of laundering reinforces the case for stronger bridge security, sanctioned-address screening, and real-time monitoring at protocol endpoints.
CryptoSlate
CoinDesk
CoinTelegraph
Crypto Rank News
Lookonchain