Where did the kelp $292m go? anatomy of a $292m laundering

2026-04-23 The Smart Ape

https://archive.md/FUKS5

Thumbnail for Where did the kelp $292m go? anatomy of a $292m laundering

The excerpt traces laundering after a reported North Korean theft of $292 million from Kelp DAO, describing pre-funded Tornado Cash wallets, cross-chain gas preparation, and a forged LayerZero message that released 116,500 rsETH. The actor rapidly converted risky rsETH into ETH and wstETH through Aave and Compound, consolidated funds, and then fragmented them across large wallet clusters to overwhelm tracing. Downstream flows used Thorchain, Umbra, Chainflip, BitTorrent Chain, Tornado Cash, Bitcoin UTXO fragmentation, and Tron USDT rails before reaching OTC brokers in China and Southeast Asia. The value of the report is its detailed view of how DPRK-linked crypto theft proceeds can move from an on-chain bridge exploit into privacy, cross-chain, stablecoin, and fiat off-ramp infrastructure.

Related Reports

« Back