Kelp DAO Exploiter Laundered $80M in ETH via THORChain: Analyst
An onchain analyst has alleged that the individual behind the Kelp DAO exploit laundered roughly $80 million in ETH, with most of the funds reportedly moved through THORChain, the cross-chain decentralized exchange protocol.
What the onchain analyst alleges about the $80 million ETH trail
The claim, attributed to an unnamed onchain analyst, centers on approximately $80 million in ETH allegedly siphoned from the Kelp DAO exploit and subsequently moved through decentralized infrastructure. The allegation remains unconfirmed by any official body or protocol team at the time of writing.
The Kelp DAO incident is part of a broader exploit that reportedly affected multiple protocols. According to a security council emergency action posted on the Arbitrum governance forum, Arbitrum’s Security Council moved to freeze funds connected to the exploit on its network.
Separately, Aave’s governance forum published an rsETH incident report dated April 20, 2026, indicating downstream effects reached other DeFi protocols that held exposure to Kelp DAO’s liquid restaking token.
Why THORChain is central to the alleged laundering route
The analyst specifically named THORChain as the primary channel through which most of the ETH was allegedly converted or moved. THORChain enables native cross-chain swaps without requiring wrapped tokens or centralized intermediaries, which makes onchain tracing significantly harder once funds leave Ethereum.
That detail is the key news hook. Unlike centralized exchanges that can freeze assets on law enforcement request, THORChain operates without custodial control over swaps in progress. If the allegation holds, it would represent one of the larger exploit-linked fund flows routed through the protocol.
Broader implications for Kelp DAO and DeFi security
The alleged laundering figure is a subset of what reporting suggests was a larger exploit. Decrypt reported that the Arbitrum Security Council froze $71.5 million in ETH linked to what it described as a $292 million KelpDAO exploit. That freeze action was previously covered in detail when the Arbitrum Security Council first announced the emergency intervention.
The combination of Arbitrum’s freeze and the Aave rsETH incident report suggests that multiple DeFi protocols and governance bodies are actively responding to the fallout. For readers following how decentralized exchanges handle illicit fund flows, THORChain’s role here echoes concerns raised in past incidents where emerging DeFi platforms face regulatory and security scrutiny as adoption scales.
The incident raises familiar questions about cross-chain fund recovery, a challenge that has only grown as bridging and swapping infrastructure becomes more decentralized.
What remains unconfirmed
Several critical details remain unverified. The identity of the onchain analyst making the claim has not been publicly confirmed, nor has any protocol team or law enforcement agency corroborated the specific THORChain routing allegation.
The distinction between frozen funds on Arbitrum and the alleged amount laundered through THORChain also remains unclear. Whether these represent overlapping or separate tranches of the exploited funds has not been established.
Key signals to watch include any official statement from Kelp DAO’s team, THORChain governance discussions about the alleged fund flows, and further onchain analysis from independent researchers that could confirm or dispute the routing claim.
FAQ: Kelp DAO exploit and THORChain laundering claims
What happened in the Kelp DAO case?
Kelp DAO was reportedly exploited in an incident that may have involved up to $292 million, according to reporting on the Arbitrum Security Council’s emergency freeze action. The full scope is still being assessed across multiple protocols.
How much ETH was allegedly laundered?
An onchain analyst alleged that approximately $80 million in ETH was laundered from the exploit proceeds. This figure has not been independently confirmed.
Why is THORChain mentioned in the report?
The analyst claimed that most of the funds were moved through THORChain, a decentralized cross-chain swap protocol that operates without centralized custody, making asset freezes difficult.
Has the laundering claim been officially confirmed?
No. The claim is based on a single onchain analyst’s assessment. No protocol team, law enforcement agency, or independent research firm has publicly verified the THORChain routing allegation as of this writing.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making any investment decisions.
