According to Arkham monitoring, the approximately $220 million in unfrozen funds from the Kelp DAO cross-chain bridge attack have been almost completely laundered by the hacker, with only about $1.7 million remaining in the original attacker's wallet. The hacker is linked to North Korea and previously carried out a $292 million cross-chain bridge attack targeting LayerZero in April. The funds were moved using privacy tools such as THORChain, Wasabi, Tornado Cash, and Umbra. On April 20, the Arbitrum Security Council froze approximately $71 million in ETH, which is currently the only recoverable portion. LayerZero released a report on May 18, attributing the attack to the North Korean TraderTraitor group.