2026-11-04 –, Lightning Stage
zeroShadow follows illicit funds from the first theft address to the final cashout. This talk shares unfiltered findings of how DPRK, Wrench Attacks, and The COM laundered illicit funds, followed by what protocols can do with real-time data to better contain an incident.
Use a case study from this year to highlight the flow of stolen funds we see for each of these threat actors
- Including DPRK $292M KelpDAO exploit where stolen assets were distributed across 6,293 individual addresses over a three-month period.
- Compare to DPRK Drift exploit (different subgroup)
Include unique data points like how long does DPRK keep funds in their initial wallets? How quickly do wrench attackers move their funds? What are the key obfuscation tactics that the COM use to evade compliance tools?
- Use of Wasabi mixing and cross-chain bridging evade autotracing
- Show how launderers will change their paths within minutes to try and outwit freezing
Use real examples from zeroShadow Threat Intelligence tool to highlight how it works and where it actually disrupts money laundering at speed
- How protocols can implement free threat intelligence data to eliminate traditional compliance budget barriers
Julia is the Co-Founder and Head of Investigations of zeroShadow, a holistic web3 security solution service created to enable crypto companies to enhance their security and incident response capabilities. Julia also serves as a volunteer for SEAL911.