KelpDAO Hacker Swaps 75,700 ETH for BTC In 36 Hours Through THORChain
23 Apr 2026 · 12:23 UTC · CoinCentral RSS Feed · Original source
Read original at CoinCentral RSS Feed →
Summary
The KelpDAO protocol was hacked, resulting in theft of 75,700 ETH valued at approximately $175 million. Within 36 hours, the attacker converted the majority of stolen ETH into Bitcoin through THORChain, a cross-chain decentralized exchange. The swaps generated $800 million in total protocol volume and earned THORChain approximately $910,000 in transaction fees. The movement of stolen funds from Ethereum to Bitcoin suggests the attacker's intent to diversify away from the compromised network and potentially prepare assets for eventual liquidation.
Why it matters
The hack's market impact derives from multiple mechanisms: (1) Liquidation Pressure—rapid ETH-to-BTC conversion suggests attacker aims to secure stolen value before authorities intervene, creating measurable selling pressure on ETH and buying pressure on BTC; (2) Sentiment Deterioration—security breaches in major protocols undermine confidence in broader DeFi ecosystem, with historical precedent showing 30-40% drawdowns in related assets; (3) Risk-Off Dynamics—hack triggers flight-to-safety reducing exposure to smaller-cap assets; Bitcoin may outperform altcoins despite broader downturns; (4) THORChain Impact—heavy conversion use generates $910K in fees and $800M volume, boosting RUNE temporarily while raising concerns about facilitating theft; (5) Uncertainty Premium—lack of clarity on attacker identity and liquidation timeline elevates volatility. Key Assumptions: Attacker continues activity for 24-48 hours; regulatory response follows; security audits demanded. Key Uncertainties: Attacker may pause conversions; THORChain security questioned; recovery narratives may emerge quickly.
Expected impact
The KelpDAO hack represents a significant security breach with multifaceted market implications. The theft of 75,700 ETH (~$175M) and its rapid conversion to BTC through THORChain signals aggressive liquidation of stolen assets, indicating potential intent to obfuscate fund origins before regulatory intervention. For Bitcoin: The $175M inflow from stolen ETH creates mixed signals. While capital influx provides short-term buying pressure, the broader context of a major security breach drives risk-off sentiment, triggering potential profit-taking across crypto markets. For Altcoins: Impact is substantially more pronounced. Ethereum and DeFi-focused tokens face direct selling pressure due to the hack's Ethereum ecosystem origin, with panic selling in DeFi tokens and volatility spiking across smaller-cap altcoins. Timeframe Distribution: Immediate hours (minutes-hours) see peak volatility and emotional selling. Daily timeframes show market digestion and regulatory discussions. Weekly-monthly show sentiment normalization with potential recovery narratives if security improvements are announced. The incident significantly undermines investor confidence in DeFi protocol security.