Investigations into the 2026 exploits targeting the Kelp DAO and Humanity Protocol have taken on a new dimension as a result of the latest on-chain activity.
Blockchain analyst ZachXBT noticed that funds from two different attacks were recently mixed.
This suggests that assets from both exploits were moved through the same wallet or transaction flow. Interestingly, this also reveals the connection between the attackers.
How much of the stolen funds were moved?
The Humanity Protocol attacker transferred 15,403 ETH worth $23.6 million to a relatively new platform. Ethereum (ETH) address, According to Spectre. money from now on transferred to the Bitcoin (BTC) network, where it was incorporated into earnings linked to the KelpDAO exploit.
As of now, more than $8 million of the stolen money has been laundered by the Humanity Protocol attacker.
For context, Lazarus Group uses this well-known tactic to consolidate profits from various operations into a single company. bitcoin transfer them to your wallet before transferring them through mixers and countertops.
However, the Kelp DAO exploit approximately $292 million was evacuated From the LayerZero bridge in April 2026.
Meanwhile, Humanity Protocol lost nearly $32 million In June. This happened when hackers gained access to the distributor account and wallets controlled by the team through the developer’s compromised device.
Is this exploit linked to the Lazarus Group?
By now, the Humanity Protocol hack had raised suspicions that insiders may have been involved in the attack.
However, the new combination of the laundering trace of the Kelp DAO exploit points to a common external threat actor or a closely related cybercrime network.
The plaintiff argued that because the funds were linked to North Korea, they had the right to seize all funds belonging to entities affiliated with North Korea as part of the money owed in outstanding judgments.
Plaintiffs currently have more than $877 million in outstanding judgments from U.S. courts against North Korea.
Continued risk in DeFi
This merger comes at a time when MEV bots are also gaining ground in on-chain markets.
While these automated systems now make the market more efficient, Jaredfromsubway.eth incident It shows how skilled attackers can manipulate even highly specialized trading infrastructure.
Together, these attacks highlight the increasing security threats facing DeFi. While all this was happening, the price of ETH fell to its intraday low of $1,581.76 due to the broader decline in the market.
Final Summary
- Funds stolen from both the Kelp DAO and the Humanity Protocol exploit were reportedly commingled.
- As of last update, more than $8 million of the stolen money has been laundered by the Humanity Protocol attacker.
