Executive Summary on Hacked Funds
Contents
4.21.25 Executive Summary on Hacked Funds:
Total hacked funds of USD 1.4bn around 500k ETH. 68.57% remain traceable, 27.59% have gone dark, 3.84% have been frozen. The untraceable funds primarily flowed into mixers then through bridges to P2P and OTC platforms.
Recently, we have observed that the mixer mainly used by the DPRK is Wasabi. After a certain amount of BTC was washed through Wasabi, a small portion of it entered CryptoMixer, Tornado Cash and Railgun.
Then, multiple cross-chain and swap services were carried out through platforms such as Thorchain, eXch, Lombard, LiFi, Stargate, and SunSwap. Eventually, it entered OTC (Over-the-Counter) or P2P (Peer-to-Peer) fiat currency exchange services.
ETH Whereabout:
432,748 ETH (84.45%, ~$1.21 B) has been transferred from Ethereum to BTC via Thorchain
67.25% (342,975 ETH, ~$960.33 M) has been converted into 10,003 BTC across 35,772 wallets (Average 0.28 BTC each) .
1.17% (5,991 ETH, ~$16.77 M) remains on the Ethereum blockchain across …
Total hacked funds of USD 1.4bn around 500k ETH. 68.57% remain traceable, 27.59% have gone dark, 3.84% have been frozen. The untraceable funds primarily flowed into mixers then through bridges to P2P and OTC platforms.
Recently, we have observed that the mixer mainly used by the DPRK is Wasabi. After a certain amount of BTC was washed through Wasabi, a small portion of it entered CryptoMixer, Tornado Cash and Railgun.
Then, multiple cross-chain and swap services were carried out through platforms such as Thorchain, eXch, Lombard, LiFi, Stargate, and SunSwap. Eventually, it entered OTC (Over-the-Counter) or P2P (Peer-to-Peer) fiat currency exchange services.
ETH Whereabout:
432,748 ETH (84.45%, ~$1.21 B) has been transferred from Ethereum to BTC via Thorchain
67.25% (342,975 ETH, ~$960.33 M) has been converted into 10,003 BTC across 35,772 wallets (Average 0.28 BTC each) .
1.17% (5,991 ETH, ~$16.77 M) remains on the Ethereum blockchain across …