Loading article…
Kelp DAO attacker moved $220 million of unfrozen funds in six weeks, leaving only $71 million frozen for possible recovery – see the on‑chain flow and next
A hacker has laundered roughly $220 million of the $293 million stolen in the Kelp DAO exploit, leaving just $1.7 million in the original wallet and $71 million frozen as the only realistic recovery pool【2】. The rapid outflow tightens the window for any restitution and underscores the difficulty of tracing assets once they cross privacy mixers and bridges.
| At a glance | |
|---|---|
| Total exploit size | $293 million |
| Unfrozen funds laundered | $220 million |
| Frozen, potentially recoverable | $71 million |
| Catalyst | LayerZero bridge hack & subsequent cross‑chain laundering |
The April 18 attack forged a LayerZero packet to unlock 116,500 rsETH from the Ethereum escrow, then used the tokens as collateral to borrow about $236 million in WETH and wstETH, spreading losses beyond Kelp DAO users【3】. Within days, the attacker began bridging Ether to Bitcoin via THORChain, mixing it through the Wasabi CoinJoin service, and sending it back to Ethereum through Tornado Cash—each hop stripping traceability【2】. Additional routes included Umbra and other privacy protocols, creating a multi‑layer laundering cascade that left on‑chain recovery virtually impossible【3】.
Arbitrum’s Security Council froze roughly $71 million in ether shortly after the breach, and this tranche remains the only material candidate for return, pending governance votes and a U.S. court order to move the funds to an Aave‑controlled multisig wallet【2】. The frozen assets contrast sharply with the $220 million that escaped, illustrating that speed of a freeze, not bounty offers, determines recoverability【2】. The incident contributed to a broader DeFi risk reassessment: total value locked in DeFi fell sharply, and lending platforms such as Aave reported bad‑debt estimates ranging from $123.7 million to $230.1 million depending on loss allocation【3】.
The Kelp DAO case highlights how a single‑point‑of‑failure in bridge design can cascade into massive, near‑irreversible losses, and it leaves the DeFi community watching whether governance mechanisms can stem future exploits.
Coverage is mostly measured — 127 of 131 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 3 outlets · Jul 29, 2026 · How we report
A DAO, or decentralized autonomous organization, is an entity with no central governing body that uses a bottom-up management approach to make decisions.
MakerDAO uses smart contracts to facilitate an overcollateralized loan process, adjusting collateral types and interest rates to keep the stablecoin's value near one US dollar.
MKR is a governance token that allows its owners to vote on proposed changes to the system's smart contracts and parameters.
In August 2024, MakerDAO underwent a rebranding to become known as Sky.