A phisher who drained $2 million in DAI from a Bofur Capital-related address has converted the stolen funds into 825.5 ETH. The conversion was identified through on-chain monitoring of the attacker's wallet activity following the initial exploit. The incident highlights ongoing security risks for crypto capital firms as attackers rapidly move illicit funds across assets to obscure transaction trails. Security firm PeckShield flagged the swap, tracking the flow of stolen DAI directly into Ethereum holdings.