Arbitrum Security Council Freezes 30,766 ETH Linked to KelpDAO Exploit

Arbitrum's Security Council has executed an emergency freeze on 30,766 ETH—about $70 million—tied to the KelpDAO exploit, transferring the assets into a secure wallet to prevent attacker access. The council said the operation was designed to isolate only the compromised funds without altering other chain state or impacting Arbitrum users and applications. Of the 12 council members, nine voted to approve the action. The move followed coordination with law enforcement, which provided information related to the exploiter's identity. The frozen ETH will remain locked until Arbitrum governance, working alongside relevant legal authorities, determines what to do next. The incident traces back to April 18, 2026, when attackers exploited a vulnerability in Kelp DAO's LayerZero-powered bridge. The breach involved compromised verifier infrastructure and resulted in the theft of 116,500 rsETH, Kelp DAO's liquid restaking token, with estimated losses of roughly $292 million. Arbitrum acted two days later using a targeted mechanism rather than a chain reversal, securing what amounts to roughly a quarter of the stolen value. The decision has reignited debate over decentralization and control. Some community members questioned how a council can freeze funds on a system described as decentralized, with DOG memecoin creator Leonidas arguing that decentralization has become more of a marketing label and that only Bitcoin is truly decentralized. Others drew comparisons to other freezes, noting that while some asset freezes are condemned, freezing stolen funds is often viewed as ethically justified—yet both demonstrate that governance can override decentralization when stakes are high. Ripple CTO David Schwartz weighed in on the broader governance concern, saying that while an authority can make the chain "claim" it has done something, it cannot force participants to accept that claim; users can choose which set of claims to honor. For now, no timeline has been given for a final decision. The next steps are expected to involve law enforcement, with the attackers suspected to be DPRK-linked. For Kelp DAO users, the recovery of about a quarter of the stolen assets offers some immediate relief.