Kelp DAO Attacker Transfers $175M in Ether Following Exploit
Key Takeaways:
- The Kelp DAO exploiter has moved $175 million worth of Ether, part of a larger $290 million theft.
- Funds were shifted to new blockchain addresses, suggesting an attempt at laundering.
- Arbitrum’s response includes freezing 30,766 ETH linked to the breach.
- Aave’s ETH V3 market resumes activity, but borrowing costs surge dramatically.
- Non-custodial platforms like THORChain and Umbra complicate fund tracing.
WEEX Crypto News, 2026-04-21 15:41:14
Movement of Stolen Ether After Kelp DAO Exploit
The attacker responsible for siphoning approximately $290 million from Kelp DAO has initiated the movement of 75,700 Ether, valued at roughly $175 million, evidently to launder the ill-gotten gains. Held in wallets flagged by Arkham and transferred in several large transactions on a Tuesday, these funds are now under scrutiny. A massive 25,000-ETH shift to a new address and over 50,700 ETH moved elsewhere highlight the calculated efforts to shroud these operations in anonymity.
Critique of LayerZero’s Security Protocols
The breach was facilitated through weaknesses in Kelp DAO’s use of the LayerZero-powered rsETH bridge, attributed to the reliance on a mono-path 1/1 decentralized verifier network (DVN). LayerZero had flagged this setup as a potential vulnerability due to its single point of failure—a glaring hole now punctuated by the attack.
Widespread Implications in DeFi Arenas
In the immediate fallout, Arbitrum’s security council preempted further asset loss by freezing 30,766 ETH related to the exploit in an intermediary wallet accessible solely via its governance. This decisive action underscores the integrated defense mechanisms within DeFi networks, but also highlights the lingering risks. Simultaneously, Aave bore the brunt, facing potential bad debt scenarios ranging from $123.7 million to $230.1 million, based on its incident analysis.
Fund transfers via non-custodial venues like THORChain—bypassing obligatory Know Your Customer (KYC) checks—underscore the sophistications in laundering schemes. Drawing on the narrative of the 2025 Bybit hack, where 83% of stolen Ether converted into Bitcoin went mostly through THORChain, the precedent for such moves further complicates recovery efforts.
Re-emergence of Aave’s Ethereum V3 Market
Post-freeze, Aave reopened its Wrapped Ether (WETH) reserves on the Ethereum Core V3 market, encouraging activity. Nevertheless, the halting of services across Ethereum Prime and other platforms persists, amid liquidity fears. Insights from DeFiLlama reveal a stark $10 billion drop in total value locked (TVL), reflecting cautionary withdrawals amid safety concerns.
Charting Future Risks and Outcomes
The uptick in Aave’s USDt borrowing rates from 3% to a staggering 14%—the highest since late 2024—reflects market volatility and reactive risk management. Fund outflows and fluctuating borrowing costs depict a DeFi space grappling with the ramifications of security breaches and the ensuing ripple effects.
[Place Image: Chart showing Kelp DAO Ether transfers over time]
FAQ
What triggered the Kelp DAO exploit?
The Kelp DAO exploit was prompted by vulnerabilities in its use of LayerZero’s rsETH bridge, particularly a single-point failure within its 1/1 decentralized verifier network.
How are non-custodial protocols involved in fund transfers?
Non-custodial protocols like THORChain and Umbra facilitate anonymous transactions without KYC checks, enabling laundered fund flows that evade regular monitoring systems.
How has Arbitrum responded to the exploit?
In reaction, Arbitrum’s security council froze 30,766 ETH to curb further misuse of funds, highlighting the importance of governance in protecting DeFi ecosystems.
What impact has the exploit had on Aave’s market activities?
While Aave reopened its WETH market, ongoing liquidity fears from the exploit have caused significant withdrawals and increased borrowing costs for the USDt market.
Can these exploited funds be retrieved effectively?
Retrieval is complex, especially when laundered through platforms like THORChain. However, tracing efforts continue, leveraging crypto forensic and governance controls.
[Place Image: Screenshot of Aave borrowing rate spike]
You may also like

Morning Report | BitMine increased its holdings by 126,971 ETH last week; trader Eugene announced his exit from the crypto market

Wang Chuan: How can one not feel anxious after the neighbor Old Wang made thirty times profit by investing in storage stocks? (Seven) - A quarter-century cycle

Cryptocurrency CEXs are flocking to sell US stocks, and traditional brokerages are facing an "uninvited guest."

$75 billion in foreign capital has fled, and South Korean retail investors have absorbed it all using leverage

Japan’s Three Megabanks Plan Joint Stablecoin Issuance in Fiscal 2026
MUFG, SMBC, and Mizuho reportedly plan to jointly issue fiat-pegged stablecoins in fiscal 2026, signaling Japan’s growing push into bank-led digital payment infrastructure.

Humanity Discloses H Token Dual-Chain Attack Details, With Losses on Ethereum and BSC Exceeding $36 Million
Humanity said the H token attack across Ethereum and BSC caused more than $36 million in losses after leaked ProxyAdmin keys enabled malicious contract upgrades and token minting.

White House Discusses CLARITY Act With Law Enforcement Ahead of Senate Vote
The White House discussed the CLARITY Act with law enforcement ahead of a Senate vote, focusing on illicit finance risks and developer protections.

Bitcoin Trading Guide 2026: Strategies for Experienced Traders

What Is XAUT and PAXG? Why Tokenized Gold Is Booming in 2026

Will the SpaceX IPO Hurt Bitcoin? Here's What Traders Are Watching

Foreign selling in the South Korean stock market accelerates, with cumulative net sales reportedly reaching $75 billion this year
On June 9, The Kobeissi Letter, citing Goldman Sachs data, reported that global investors are selling South Korean stocks at an unusually rapid pace. In the latest trading session, foreign investors sold about $801 million worth of Kospi constituent stocks again; total foreign outflows last week reached about $10 billion, and the market has been in net foreign selling on nearly every trading day over the past month. According to the data cited in the report, foreign investors have sold about $75 billion worth of South Korean stocks so far this year. Meanwhile, South Korean retail and institutional investors together recorded roughly $69 billion in net buying over the same period, suggesting that the market’s main buying support has come from domestic capital rather than returning overseas funds. The information currently disclosed still mainly comes from The Kobeissi Letter’s retelling and Goldman Sachs data summaries, while public details on the statistical period and the specific definition of “selling” remain relatively limited.

Fortune Warns of Strategy’s Financing Structure Risks as Bitcoin Premium Narrows
Fortune warned that Strategy’s Bitcoin treasury model faces growing financing risks as MSTR’s net asset premium narrows and preferred stock dividend pressure increases.

Ferrari Challenge Le Mans: Carl Moon to Dominate in WEEX Livery

Sahara AI Responds to SAHARA’s Sharp Drop: No Contract or Product Security Issues Found, Internal Investigation Underway
Sahara AI responded to SAHARA’s 60% price drop, saying no token contract or product security issues have been found and an internal investigation is underway.

WEEX Deposit/Withdrawal Dynamic Island: Your Asset Status, Always in Sight

Scaling Crypto Derivatives: The Digital Asset Infrastructure Behind High-Volume Trading
In the fast-moving digital asset ecosystem, derivatives platforms face an extreme architectural test. High-leverage futures markets demand more than just standard security—they require absolute operational precision, zero-latency matching engines, and ironclad structural scalability, all while navigating intense market volatility.
As global platforms scale to meet these demands, the industry is shifting away from rigid, monolithic setups toward a more agile, "decoupled" infrastructure philosophy.
The Blueprint for High-Volume Copy TradingFor elite global exchanges like WEEX (founded in 2018), this architectural choice becomes critical when scaling high-volume retail features like social copy trading. When thousands of users automatically mirror the real-time strategies of elite traders simultaneously, it triggers sudden, monumental spikes in concurrent transactional volume.
To prevent execution latency or settlement bottlenecks during these peak volatility events, a platform's primary engine must remain entirely dedicated to risk management, copy-trade synchronization, and order matching.
The Architectural Rule: New-generation platforms must separate front-end user execution engines from heavy backend infrastructural overhead to eliminate operational friction.
By separating these layers, platforms can maintain complete sovereignty over their trading environments and user experiences while strategically aligning with institutional-grade infrastructure ecosystems. This strategic framework allows modern exchanges to leverage advanced Digital Asset Custody infrastructure such as Cobo’s behind the scenes, ensuring that backend wallet management scales elastically alongside trading spikes.
Capitalizing on Market Momentum and 400× LeverageIn a derivatives arena where platforms offer up to 400× leverage on perpetual contracts, capital efficiency and market agility are core business metrics. To capture market momentum, an exchange needs the ability to rapidly expand its asset offerings, supporting everything from legacy crypto assets to sudden, trending altcoins across a massive library of trading pairs.
Adopting a flexible, scalable Wallet-as-a-Service (WaaS) solution such as Cobo’s could completely rewrite the development timeline for high-growth exchanges. Instead of spending months of engineering capital building out custom backend wallet architectures for every new blockchain network, platforms can deploy localized infrastructure in days.
This agility allows platforms to instantly scale their listings to over a thousand trading pairs without compromising security or delaying time-to-market. It mirrors the exact operational advantages seen during high-velocity market events, similar to how advanced wallet infrastructure empowers platforms during sudden asset surges; allowing exchanges to pass that speed and liquidity directly to their global user base.
A Mature Foundation for GrowthThe synergy between trusted infrastructure ecosystems and global trading platforms represents the natural evolution of a maturing crypto market. As WEEX continues to scale its global spot and derivatives offerings for over 6 million users, adopting robust backend paradigms proves that platforms no longer have to compromise between cutting-edge trading velocity and uncompromised structural security.

Get Paid to Onboard? Try WEEX’s New Homepage with Rewards for Registration, Deposit & Trade

WEEX Custom Layout: Build Your Perfect Trading Workspace in Seconds
Morning Report | BitMine increased its holdings by 126,971 ETH last week; trader Eugene announced his exit from the crypto market
Wang Chuan: How can one not feel anxious after the neighbor Old Wang made thirty times profit by investing in storage stocks? (Seven) - A quarter-century cycle
Cryptocurrency CEXs are flocking to sell US stocks, and traditional brokerages are facing an "uninvited guest."
$75 billion in foreign capital has fled, and South Korean retail investors have absorbed it all using leverage
Japan’s Three Megabanks Plan Joint Stablecoin Issuance in Fiscal 2026
MUFG, SMBC, and Mizuho reportedly plan to jointly issue fiat-pegged stablecoins in fiscal 2026, signaling Japan’s growing push into bank-led digital payment infrastructure.
Humanity Discloses H Token Dual-Chain Attack Details, With Losses on Ethereum and BSC Exceeding $36 Million
Humanity said the H token attack across Ethereum and BSC caused more than $36 million in losses after leaked ProxyAdmin keys enabled malicious contract upgrades and token minting.





