# Kelp DAO hacker launders $220 million, recovery window shrinks

**Published:** 2026-07-29T07:18:11.613Z  
**Topic:** Dao Crypto  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/86a2fa76-2ccd-4232-9076-889d64a77d4f

Kelp DAO attacker moved $220 million of unfrozen funds in six weeks, leaving only $71 million frozen for possible recovery – see the on‑chain flow and next

A hacker has laundered roughly $220 million of the $293 million stolen in the Kelp DAO exploit, leaving just $1.7 million in the original wallet and $71 million frozen as the only realistic recovery pool【2】. The rapid outflow tightens the window for any restitution and underscores the difficulty of tracing assets once they cross privacy mixers and bridges.  

| At a glance | |
|---|---|
| Total exploit size | $293 million |
| Unfrozen funds laundered | $220 million |
| Frozen, potentially recoverable | $71 million |
| Catalyst | LayerZero bridge hack & subsequent cross‑chain laundering |

## How the funds moved  
The April 18 attack forged a LayerZero packet to unlock 116,500 rsETH from the Ethereum escrow, then used the tokens as collateral to borrow about $236 million in WETH and wstETH, spreading losses beyond Kelp DAO users【3】. Within days, the attacker began bridging Ether to Bitcoin via THORChain, mixing it through the Wasabi CoinJoin service, and sending it back to Ethereum through Tornado Cash—each hop stripping traceability【2】. Additional routes included Umbra and other privacy protocols, creating a multi‑layer laundering cascade that left on‑chain recovery virtually impossible【3】.  

## Recovery prospects and market impact  
Arbitrum’s Security Council froze roughly $71 million in ether shortly after the breach, and this tranche remains the only material candidate for return, pending governance votes and a U.S. court order to move the funds to an Aave‑controlled multisig wallet【2】. The frozen assets contrast sharply with the $220 million that escaped, illustrating that speed of a freeze, not bounty offers, determines recoverability【2】. The incident contributed to a broader DeFi risk reassessment: total value locked in DeFi fell sharply, and lending platforms such as Aave reported bad‑debt estimates ranging from $123.7 million to $230.1 million depending on loss allocation【3】.  

## What to watch  
- **Arbitrum governance** – any proposal to release the frozen $71 million could signal a partial restitution.  
- **LayerZero security updates** – further statements or patches may affect confidence in cross‑chain bridges.  
- **Regulatory scrutiny** – attribution to the DPRK‑linked TraderTraitor group raises compliance concerns for custodians handling the laundered funds.  

The Kelp DAO case highlights how a single‑point‑of‑failure in bridge design can cascade into massive, near‑irreversible losses, and it leaves the DeFi community watching whether governance mechanisms can stem future exploits.

## Sources
1. CoinTelegraph — [Recovery hopes fade as Kelp DAO hacker launders nearly all $220M in stolen funds](https://cointelegraph.com/news/kelp-dao-recovery-hacker-launders-most-funds-293m-exploit)
2. Spendnode — [Kelp DAO Hacker Launders $220M in Six Weeks, Closing Recovery...](https://www.spendnode.io/blog/kelp-dao-hacker-launders-220m-recovery-window-june-2026/)
3. Financefeeds — [Kelp DAO Recovery Window Narrows as Hacker Launders Nearly All...](https://financefeeds.com/kelp-dao-recovery-window-narrows-as-hacker-launders-nearly-all-220-million-in-unfrozen-funds/)

---
Cite as: TrendWatcher, "Kelp DAO hacker launders $220 million, recovery window shrinks", https://www.trendwatcher.in/article/86a2fa76-2ccd-4232-9076-889d64a77d4f