Steadefi lost about $1.14 million after its deployer address was compromised, allowing the attacker to take ownership of vault contracts on Arbitrum and Avalanche, abuse owner-only functions, drain available lending-vault funds, pause farm contracts and bridge swapped proceeds to Ethereum. Although one incident write-up did not tie the compromise to a specific actor, ZachXBT's later laundering analysis included Steadefi among 25 cryptocurrency hacks traced to Lazarus Group, with the broader stolen-funds set routed through mixers, bridges and OTC conversion paths.