KelpDAO hacker moves 1,979 BTC through THORChain; Balancer exploiter resurfaces after five months

April 24 — PeckShield monitoring shows the KelpDAO attacker has shifted all funds from Ethereum to the Bitcoin network, mainly via THORChain, totaling about 1,979 BTC. Most of the funds are believed to have been successfully laundered. The attacker tied to the earlier Balancer exploit has also become active again after roughly five months of inactivity. The wallet is now swapping around $700,000 worth of ETH into BTC through THORChain, indicating a new laundering cycle.