TLDR
- Emergency action by Arbitrum’s Security Council secured 30,766 ETH (approximately $71 million) connected to the Kelp DAO security breach
- Assets were transferred to a governance-managed wallet, preventing access by the hacker
- The secured amount represents about 25% of the total $292 million stolen during Saturday’s attack
- LayerZero has indicated with preliminary confidence that North Korea’s Lazarus Group orchestrated the breach
- A majority vote of 9 out of 12 council members authorized the freeze following extensive deliberation
In an unprecedented emergency response late Monday evening, Arbitrum’s Security Council executed a freeze on 30,766 ETH valued at roughly $71 million that was linked to the recent Kelp DAO security breach. The cryptocurrency has been transferred to an intermediary address that requires additional Arbitrum governance authorization for any future access.
The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times,…
— Arbitrum (@arbitrum) April 21, 2026
Official confirmation of the asset freeze came at 11:26 p.m. ET on April 20. The compromised ether can no longer be controlled by the wallet address that previously contained it.
This emergency measure follows Saturday, April 19’s exploitation of Kelp DAO’s LayerZero-based bridge infrastructure. The attackers successfully extracted 116,500 rsETH by exploiting vulnerabilities in compromised verification systems. Security analysts estimate total damages from the incident at approximately $292 to $293 million.
rsETH functions as a liquid restaking token created by Kelp DAO. This token represents participants’ staked ethereum holdings within the network.
LayerZero, the organization responsible for the exploited bridge technology, has stated with preliminary certainty that North Korea’s notorious Lazarus Group orchestrated this cyber attack. LayerZero has remained silent regarding the Arbitrum asset freeze action.
The secured $71 million constitutes roughly one-fourth of the complete stolen sum. This marks the most substantial single recovery effort implemented in response to the security breach thus far.
How the Freeze Was Decided
Arbitrum’s Security Council operates as a 12-person governing body selected through community voting. This council possesses emergency authority for critical scenarios like this incident. The freeze received approval from nine of the twelve sitting members.
Council representative Griff Green emphasized that the group “did not make this decision lightly,” acknowledging there were “countless hours of debates, technical, practical, ethical and political.” The council also confirmed it coordinated with law enforcement agencies during their decision-making process.
Arbitrum officials stressed that the freeze action did not impact any other participants or decentralized applications operating on the network.
Controversy Over the Freeze
The council’s decision has sparked debate within the cryptocurrency community. Several users on X have raised concerns about whether this freeze compromises Arbitrum’s commitment to decentralization. Detractors contend that freezing assets through council authority contradicts fundamental principles of permissionless blockchain systems.
Proponents of the action counter that it safeguards users and preserves network credibility.
The freeze also intensifies an ongoing disagreement between Kelp DAO and LayerZero regarding accountability for the security breach. With $71 million now immobilized, any forthcoming negotiations about loss distribution have a substantial buffer before considering insurance claims, litigation, or treasury allocations.
The perpetrators additionally utilized stolen Kelp tokens as collateral to obtain cryptocurrency through the Aave lending protocol, generating bad debt throughout the broader DeFi lending ecosystem.
Kelp DAO has announced it is collaborating with ecosystem allies on establishing a recovery fund and assessing options for loss distribution and legal cooperation.
The possibility of freezing additional stolen assets hinges on the attacker’s fund movements and whether other blockchain networks with comparable emergency capabilities will intervene.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
