THESE ARE REAL HACKERS: This is exactly how these situations usually evolve, block one route, and they pivot fast.

after #Arbitrum froze a chunk of funds, the #KelpDAO attacker didn’t slow down, instead, they shifted activity back to the #Ethereum mainnet and moved 75,701 ETH (~$175M) across multiple wallets. once funds start moving like this, especially across fresh or linked addresses, it typically signals the beginning of laundering attempts, splitting, routing, and preparing to obfuscate the trail.

this phase is critical because: funds may get fragmented across many wallets, could be routed through bridges, mixers, or DEXs, tracing becomes harder with each hop.
It also highlights a bigger reality, freezing assets on one chain helps, but if liquidity exists elsewhere, attackers can still maneuver. now it becomes a race between on-chain tracking teams and the attacker’s speed.

addresses involved:
0xF9802c5EB6b972Ba686aFa7CA615910Ea8310b85
0xABc82C8975c922E5aa836b4AFd36FAD4511A65b8