Summary
KelpDAO is a decentralized autonomous organization protocol that allegedly suffered a major exploit resulting in over $280 million in stolen funds across Ethereum and Arbitrum networks. According to ZachXBT, the attack was carried out by North Korean-linked actors who funded their operations through Tornado Cash and subsequently began laundering portions of the stolen funds through various protocols.
No evidence submitted yet — be the first.
Editorial decisions, corrections, and updates are anchored on Solana.
KelpDAO
Update: DPRK began laundering $1.5M from the $290M KelpDAO/LZ exploit from Ethereum mainnet to Bitcoin via Thorchain and another $78K via Umbra Thorchain transactions: `0x99e09424a28873145f0f4d2ad2cedaebe788df5fab25ba87a06057c457ac31ef 0x171b08024347b5cb7399761b1d6836649f9cbfaf8e94bcbb42625874db5dc206 0x2909e93741e9fe32286dafc8769be5089de0bad4cfcc9ad4b715124f50307171 ` Umbra transactions: `0xa2a6cc54afd2dd487ea052cd712ed0e1889f2886d857d46c266014173caa7509`
- [1]MEDKelpDAOsocial media
KelpDAO
KelpDAO appears to have had $280M+ stolen one hour ago on Ethereum and Arbitrum. The attack addresses were funded via Tornado Cash. Theft addresses `0x5d3919F12bCc35c26Eee5F8226A9bee90c257Ccc| 0xBb6A6006Eb71205e977eCeb19FCaD1C8d631C787 0x1F4C1c2e610f089D6914c4448E6F21Cb0db3adeF 0xeBA786C9517a4823A5cFD9c72e4E80BF8168129B 0xCBb24A6B4DAfaAA1a759A2F413eA0eB6AE1455CC 0x8d11AeAC74267DD5C56D371bf4AE1AFA174C2d49` (Edited to update the victim later identified as KelpDAO)
- [1]MEDKelpDAOsocial media
Research Gaps
3 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [high]no regulatory
No regulatory or sanctions cross-check. Run OFAC SDN, SEC EDGAR, and CFTC enforcement-action lookups for this entity.
- [med]single source
Only one source has reported on this entity. Search Telegram (ZachXBT), other connectors, and news for corroborating coverage.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
model: zachxbt-connector
generated: 5/4/2026, 4:05:01 PM
avoid.net — verified advice for a post-truth world