A post by @WuBlockchain on X.

Suspected North Korean hackers moved roughly $1.46 million through Jupiter Lend and Circle’s cross-chain bridge, routing funds from an FBI-flagged Solana wallet (AffzFD) through about 35 intermediary wallets before consolidating and depositing into Jupiter Lend, according to on-chain analyst @FabianoSolana. A new wallet withdrew a similar amount minutes later, swapped it into USDC, bridged through Noble and dYdX, and returned it to Solana, with 16 outbound transfers totaling $1,463,410 and 19 inbound transfers totaling $1,463,400 and no funds frozen. Jupiter COO Kash Dhanda said the attackers only deposited and withdrew through Jupiter Lend—unlike an earlier Aave incident involving borrowing non-freezable assets against stolen stablecoins—and that the funds remain fully traceable via LP tokens with wallet associations preserved. The episode matters as a test of whether stablecoin issuers and lenders can freeze or trace stolen funds in real time during cross-chain laundering. Watch for Circle’s public response and any freeze of the USDC, plus whether the flagged Solana wallet’s funds continue moving through DeFi venues.