DPRK breached LayerZero's infrastructure, forged a bridge message, and walked $290 million out of KelpDAO in one transaction. Aave is holding hundreds of millions in bad debt. The dominoes are still falling. DeFi United is scrambling to catch them.
38 discrete deposits across four pool denominations, computed live from on-chain logs. Tornado's smart contracts were sanctioned in August 2022 — the contracts themselves are immutable and keep accepting ETH. This is what the chain actually shows, not an API estimate.
| Pool | Deposits | ETH in | Contract |
|---|---|---|---|
| 0.1 ETH | 20 | 2.00 ETH | 0x12D66f87… |
| 1 ETH | 13 | 13.00 ETH | 0x47CE0C6e… |
| 10 ETH | 5 | 50.00 ETH | 0x910Cbd52… |
| 100 ETH | 0 | 0.00 ETH | 0xA160cdAB… |
eth_getLogs against the four canonical Tornado Cash ETH pools.
Contracts were designated by OFAC on 2022-08-08; they remain immutable and continue accepting deposits.
Anyone who deposited in the last 24 hours has, by Treasury position, touched sanctioned infrastructure.TRON USDT moved ~$62B at last issuance count and is the dominant stablecoin venue for pig-butchering, ransomware off-ramps, and sanctions evasion. Sell-side doesn't cover it. Chainalysis dashboards it but won't publish it. This is BlueWing's lane.
| Amount | Time (UTC) | From → To | |
|---|---|---|---|
| $30.0K | 2026-04-25 10:15 | TLfmKbss…SYdWzN → TSabyiUn…1u9GEw | trace → |
| $74.5K | 2026-04-25 10:15 | TKZg7n2E…x5PTVw → TZ9tF3p8…SVpno9 | trace → |
| $87.0K | 2026-04-25 10:15 | TQHvWUPL…8M1EqE → TRKESyb1…DakDhC | trace → |
Transactions ≥5.0 BTC from mempool (unconfirmed) and the latest block (confirmed). Live from blockchain.info and mempool.space.
| Size | Transaction | State |
|---|---|---|
| 65.93 BTC $5.13M | c40d80f4…c8ecf0 | mempool |
| 16.47 BTC $1.28M | 7df47fd2…6c6d29 | mempool |
| 14.94 BTC $1.16M | b4aa6c0f…540a91 | mempool |
DPRK breached LayerZero's infrastructure, forged a bridge message, and walked $290 million out of KelpDAO in one transaction. Aave is holding hundreds of millions in bad debt. The dominoes are still falling. DeFi United is scrambling to catch them.
A risk verdict in thirty seconds, a filable report in three days, or the full intelligence package in ten. Same evidence discipline every BlueWing PDF has shipped since day one: SHA-256 manifests, confidence-graded findings, and a transaction hash behind every claim.