en
Back to the list

Arbitrum Freezes $71M ETH Linked To Kelp Hack

source-logo  techgaged.com 21 April 2026 05:31, UTC
image

Arbitrum froze 30,766 Ethereum (ETH) tied to the Kelp DAO exploit, securing about $71 million just hours after the attack escalated. The funds were moved to a governance-controlled wallet on April 20 at 11:26 p.m. ET, cutting off access from the exploiter. The move shows how quickly Layer 2 governance can step in to limit damage during active exploits.

Emergency action locks down stolen funds

According to the company’s X post on April 21, the Arbitrum Security Council executed the freeze with input from law enforcement, following identification of the attacker. The funds are now held in an intermediary wallet that cannot be accessed without further governance approval.

Arbitrum Security Council’s emergency action. Source: Arbitrum/X

Importantly, the intervention didn’t affect other users or applications on Arbitrum. The blockchain continued operating normally and the targeted action isolated only the compromised assets.

The frozen amount represents about a quarter of the estimated $292 million drained from Kelp DAO’s rsETH system. The exploit itself traces back to a failure in cross-chain verification tied to LayerZero infrastructure. Early assessments point to a compromised validator setup, with both Kelp DAO and LayerZero disputing responsibility.

Governance steps into the spotlight

This kind of intervention is rare, and it cuts straight into a long-running tension in crypto. Systems are built to be permissionless, yet moments like this show that governance layers can act as a circuit breaker when something breaks.

For traders and users, the takeaway is practical. A portion of the stolen funds is no longer in motion, which improves recovery odds and reduces immediate sell pressure tied to the bridge hack. That alone changes how markets absorb events like this.

At the same time, the incident puts bridge security back under the microscope. A single point of failure in verification was enough to trigger a nine-figure exploit. That risk hasn’t gone away.

What has changed is the response. Arbitrum showed that intervention is possible without shutting down the network. Whether that becomes expected behavior across other chains is the question now.

techgaged.com