KelpDAO attacker funnels stolen ETH to TRON via Arbitrum bridges

PeckShield said on April 22 that the KelpDAO attacker has started moving stolen assets. Some of the stolen ETH was bridged from Ethereum mainnet to Arbitrum using Across Protocol, swapped into USDT, and then sent through LayerZero into the TRON DAO ecosystem. The route suggests the attacker is leveraging multichain bridges and stablecoin conversions to fragment and launder funds, warranting continued monitoring for further transfers.