According to BlockBeats, on June 2, of the $292 million stolen in the April Kelp DAO cross-chain bridge attack, about $220 million has largely been laundered, and the attacker’s initial address currently holds only about $1.7 million in remaining assets. On-chain analysis shows that investigators have attributed the hacker to the Lazarus Group, which used privacy tools including THORChain, Wasabi, Tornado Cash, and Umbra to complete multiple rounds of cross-chain exchanges and coin mixing, thereby moving most of the funds beyond ranges that are difficult to trace.