According to on-chain analyst Specter, Wasabi protocol attackers have deposited all stolen funds into Tornado Cash, transferring approximately $5.9 million. Furthermore, a North Korean hacking group also used Tornado Cash to launder stolen funds from KelpDAO and LayerZero. They first transferred the assets across blockchains to Bitcoin, then routed them through Wasabi Mixer, extracted them, and then transferred them back across blockchains to Ethereum, depositing them into Tornado Cash. Subsequently, they withdrew the funds to a new wallet and distributed them to multiple addresses. The new wallet then deployed tokens, used the stolen funds to buy them, removed liquidity from the deployment wallet, and then transferred them across blockchains to Tron (USDT). After holding them for several hours or days, they sent them to an OTC-linked wallet.