Kelp DAO bridge attackers have laundered nearly all of the funds that remain unfrozen from the exploit, according to on-chain tracking cited by Coinpedia Fintech News.
The reporting says the hackers linked to North Korean cyber group TraderTraitor moved about $220 million in funds that were stolen in the Kelp DAO bridge exploit and later identified as recoverable. The key detail for investigators is what came next. The funds were reportedly routed through privacy-focused services, including THORChain, Wasabi, Tornado Cash, and Umbra, which can make address-to-address tracing much harder.
Coinpedia Fintech News also reports that only about $1.7 million of the roughly $220 million remains unlaundered, based on its on-chain tracking readout. The remainder, by this account, has been broken up and shuffled through those services.
Why it matters
This is a classic “recovery is not the end” case. Freezing funds can slow an attacker down, but if the still-moving portion can be routed through mixers and similar infrastructure, investigators may lose clean linkages between the exploit wallet and the ultimate destination.
The named tools matter because each plays a different role in obfuscation. Coinpedia Fintech News points to THORChain for cross-chain routing and to Wasabi, Tornado Cash, and Umbra as privacy layers, all of which can reduce the usefulness of standard tracing.
Market impact
The post does not provide specific market consequences in the source text. Still, the operational takeaway is straightforward. When attackers keep moving even after an exploit triggers partial unfrozing, it can extend the timeline for exchanges, custodians, and compliance teams that rely on attribution.
Here are the concrete facts Coinpedia Fintech News included.
| Item | What was reported |
|---|---|
| Suspected actor | North Korean cyber group TraderTraitor |
| Exploit | Kelp DAO bridge exploit |
| Unfrozen stolen funds | roughly $220 million |
| Laundered portion | nearly all of the recoverable amount |
| Reported unlaundered remainder | about $1.7 million |
| Privacy routing services named | THORChain, Wasabi, Tornado Cash, Umbra |
What to watch next
Coinpedia Fintech News ends with an implicit unanswered question. If only ~$1.7 million is still traceable in its current view, what happens to the rest.
Next steps that usually follow cases like this include tightening attribution on the downstream wallets that received the mixed funds and updating freeze and compliance lists accordingly. In this specific reporting, the practical focus is on whether investigators can map the final destinations of the routed funds despite the privacy tooling described.
Until that chain of custody is confirmed, “recoverable” stays conditional. Laundering doesn’t erase the exploit, but it can make recovery harder, slower, and more expensive.