According to Wu Blockchain citing a report by on-chain analyst Fabiano Solana, suspected North Korean hackers transferred approximately $1.46 million via Jupiter Lend and the Circle cross-chain bridge. The analyst stated that the funds originated from a wallet flagged by the FBI, which were pooled through roughly 35 intermediate wallets before being deposited into Jupiter Lend. A new wallet then withdrew a similar amount within minutes, converted it to USDC, and bridged it back to Solana via Noble and dYdX. His statistics show 16 outbound transfers totaling $1,463,410 and 19 inbound transfers totaling $1,463,400.

The report also cited an explanation from Jupiter COO Kash Dhanda, noting that the operations involved only deposits and withdrawals, the funds remain traceable via LP tokens, the wallet associations have not disappeared, and the security team conducted real-time monitoring. According to the report, as of press time, the funds have not been frozen, and Circle has not publicly responded. The hacker's identity and the fund routing are based on the analyst's findings and do not imply that Jupiter suffered a new protocol exploit.