★KelpDAO Attacker Converts ETH to BTC, Signaling Capital Flight to Bitcoin
What This Means
- →Large-scale illicit fund conversion via THORChain → increased scrutiny on decentralized cross-chain protocols.
- →Attacker converting ETH to BTC → reinforces Bitcoin's role as the preferred illicit store of value.
- →Significant stolen funds moving through DeFi → highlights persistent security vulnerabilities in the ecosystem.
"This attacker successfully laundered a massive amount of stolen ETH into Bitcoin, highlighting how cross-chain protocols can be exploited for illicit fund movement. It shows the ongoing challenge for law enforcement and the complex liquidity available to bad actors across the crypto ecosystem."

The Big Coin Report Take
A hacker behind the KelpDAO exploit recently converted approximately $175 million worth of stolen Ethereum into Bitcoin using THORChain. This move, following a complex trail through DeFi lending and privacy tools, demonstrates sophisticated tactics to obscure illicit gains. The conversion of 75,700 ETH into BTC highlights the persistent challenge of fund traceability in the decentralized finance space. Investors should watch for potential market impacts from such large-scale conversions and the ongoing efforts by law enforcement and blockchain analytics firms to track these funds.
What To Watch
- 1.BTC $68,000 — a sustained break below this psychological support and prior consolidation low could signal a deeper correction towards $64,500 as short-term holders capitulate.
- 2.THORChain (RUNE) Daily Volume — a significant and sustained increase in daily swap volume, particularly ETH to BTC, could signal increased illicit activity or a rise in privacy-seeking transactions, potentially attracting regulatory scrutiny.
- 3.FATF Travel Rule Enforcement — if major exchanges or jurisdictions begin strict, widespread enforcement of the Travel Rule for all cross-chain swaps, it could severely restrict the utility of protocols like THORChain for larger, privacy-focused transactions, impacting liquidity and user adoption.
The Big Picture
This attack reveals the increasing sophistication of on-chain laundering, utilizing cross-chain atomic swaps to obscure origins. The market must now contend with a new, highly liquid vector for illicit funds to shift between major assets, impacting perceived stability.
Related Guides
Never miss a story
More from this section
Solana Prepares for Quantum Threat — What It Means for Network SecurityCrypto Briefing4h ago- 48,600 ETH worth $110.7M staked in Beacon Depositor from unknown walletsCrypto Briefing4h ago
Consensys Pledges 30K ETH to Shore Up DeFi After ExploitCrypto News7h ago- Base Chain Adopts "Proofs of Behavior" — What It Means for On-Chain CreditInvesting.com Crypto8h ago
Former Israeli PMs Bennett and Lapid merge parties to challenge NetanyahuCrypto Briefing12h ago