🚨Abnormal On-Chain Flows Reappear: Balancer Attack Funds Continue to Transfer Across Chains

Balancer-related attacker-associated addresses have recently shown fund movements again:

👉 Transferring 5,609 Ethereum to THORChain, worth approximately $13 million

Revisiting the incident background:

In November 2025, Balancer experienced over $116 million in assets being stolen
The relevant attack paths share similar characteristics with the Aave security incident
Multiple analyses have pointed the attack source to Lazarus Group
Related funds have recently frequently used mixing tools to disperse and launder on-chain

Overall, these funds are going through a typical on-chain process:
Cross-chain transfer → Dispersed addresses → Obfuscation tools → Attempts to re-aggregate

In the crypto world, transactions are public, but the intentions of funds often need to be inferred through the path they take.

💡Mindset Booster:
On-chain, facts aren’t hidden—but it takes time for the truth to be fully revealed.