{"id":84410,"date":"2026-04-22T02:01:31","date_gmt":"2026-04-22T02:01:31","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=84410"},"modified":"2026-04-22T02:01:31","modified_gmt":"2026-04-22T02:01:31","slug":"kelp-dao-hacker-just-moved-175-million-in-ethereum-and-started-laundering-it-here-is-what-we-know","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=84410","title":{"rendered":"Kelp DAO Hacker Just Moved $175 Million In Ethereum And Started Laundering It \u2013 Here Is What We Know"},"content":{"rendered":"
\n

One of DeFi\u2019s largest exploits in recent memory took a new turn on Tuesday as Arbitrum\u2019s Security Council moved to freeze $71 million of the stolen funds \u2014 and the attacker responded almost immediately.<\/p>\n

The incident began when an unknown attacker exploited a vulnerability in Kelp DAO\u2019s LayerZero-powered bridge, draining 116,500 rsETH \u2014 approximately $292 million and roughly 18% of the token\u2019s entire circulating supply. The scale of the theft triggered an emergency pause of Kelp DAO\u2019s core contracts, but by then the damage was already done.<\/p>\n

The stolen rsETH was subsequently deposited as collateral on Aave V3, where it was used to borrow approximately $196 million in wrapped ether, leaving Aave carrying bad debt it had no role in creating and setting off the confidence crisis that has defined the past week in DeFi.<\/p>\n

Arbitrum\u2019s Security Council acted by freezing 30,766 ETH \u2014 worth approximately $71 million at current prices \u2014 and moving the funds into a governance-controlled wallet. It was a meaningful intervention, executed quickly by blockchain standards.<\/p>\n

The attacker did not wait to see what came next. Within hours of Arbitrum\u2019s move, the hacker began reacting \u2014 a development that suggests the stolen funds are already in motion and that the window for on-chain recovery<\/a> may be narrowing faster than the response can keep pace with.<\/p>\n

$175 Million Is Already Moving \u2014 and the Debate It Leaves Behind Is Just Beginning<\/h2>\n

Arkham data<\/a> confirms what many feared once Arbitrum acted. The Kelp DAO hacker has already moved all 75,701 ETH \u2014 approximately $175 million \u2014 on Ethereum and has begun laundering the funds. The Arbitrum freeze succeeded in capturing $71 million. The remaining $175 million, the larger share by a considerable margin, is now in motion and being actively obscured.<\/p>\n

\"Kelp<\/p>\n

The arithmetic is stark. A coordinated intervention by one of DeFi\u2019s most capable security councils froze less than 30% of the stolen funds. The rest left anyway.<\/p>\n

That outcome has ignited a debate that extends well beyond Kelp DAO and Aave. Arbitrum\u2019s ability to freeze wallet addresses \u2014 even in response to a clear theft \u2014 has prompted immediate questions about what blockchain immutability actually means in practice, and who holds the authority to override it. For some, the freeze represents responsible crisis response from a mature ecosystem defending its users. For others, it represents precisely the kind of centralized intervention that decentralized infrastructure was designed to prevent.<\/p>\n

Both arguments are being made loudly, and neither is entirely wrong.<\/p>\n

What is not in dispute is the damage this attack has inflicted on DeFi\u2019s broader credibility. The Kelp DAO exploit exposed collateral risk in lending protocols, triggered an $8.45 billion deposit exodus from Aave, sent AAVE down nearly 20%, and has now produced a philosophical confrontation about the limits of decentralization at the worst possible moment \u2014 when the ecosystem most needs to project confidence.<\/p>\n

rsETH Market Cap Reflects Instability in Kelp DAO\u2019s Restaking Layer<\/h2>\n

The market cap of rsETH \u2014 the liquid restaking token issued by Kelp DAO \u2014 is currently hovering near $1.3 billion after a sharp contraction that disrupted its prior recovery structure. The chart shows that rsETH reached peaks above $2 billion during earlier phases, but has since entered a volatile, downward-adjusting range, reflecting stress within the restaking ecosystem rather than organic market cycles.<\/p>\n

\"RSETH<\/p>\n

The most recent move is particularly notable. After a brief recovery toward the $1.6 billion region, the market cap was rejected and fell aggressively back toward the $1.3 billion level. This type of rapid expansion followed by equally sharp contraction typically signals forced unwinds rather than discretionary capital rotation. In this context, that aligns with the exploit involving Kelp DAO\u2019s rsETH bridge, which introduced systemic uncertainty around the asset.<\/p>\n

From a structural perspective, rsETH is now trading below its key moving averages, with the 200-day trend flattening and beginning to roll over. That suggests the growth phase that defined its earlier expansion has stalled, at least temporarily.<\/p>\n

Because rsETH represents collateral within broader DeFi systems \u2014 including lending protocols \u2014 its market cap is not just a valuation metric, but a proxy for trust. The current compression indicates that confidence has weakened, and until stability returns, the restaking layer remains vulnerable to further volatility.<\/p>\n

Featured image from ChatGPT, chart from TradingView.com\u00a0<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

One of DeFi\u2019s largest exploits in recent memory took a new turn on Tuesday as Arbitrum\u2019s Security Council moved to freeze $71 million of the stolen funds \u2014 and the attacker responded almost immediately. The incident began when an unknown attacker exploited a vulnerability in Kelp DAO\u2019s LayerZero-powered bridge, draining 116,500 rsETH \u2014 approximately $292 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-84410","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/84410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=84410"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/84410\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=84410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=84410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=84410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}