Arbitrum's Security Council Locks $71M in Stolen ETH, Raising Centralization Questions

Key Takeaways

Table of Contents

Over 30,000 ETH (approximately $71 million) tied to the KelpDAO breach was frozen by Arbitrum’s Security Council
An elected 12-person council exercised emergency authority to transfer assets into an ownerless, locked wallet
The action successfully stopped the laundering of stolen cryptocurrency but sparked fresh controversy over centralization
Skeptics claim this creates a dangerous precedent allowing centralized intervention on supposedly “decentralized” platforms
Arbitrum representatives maintain the authority is transparent, community-delegated, and used only in extreme circumstances

In a swift emergency action this week, Arbitrum’s Security Council intervened to lock down more than 30,000 ETH—valued at approximately $71 million—that had been stolen in an exploit targeting KelpDAO. The council relocated the cryptocurrency from the hacker’s address to an ownerless wallet, rendering the funds immovable.

The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times,…
— Arbitrum (@arbitrum) April 21, 2026

The decision came quickly. Steven Goldfeder, co-founder of Offchain Labs, the development team behind Arbitrum, revealed that the council’s initial inclination was actually non-intervention. The strategy to precisely quarantine the compromised assets originated from council members themselves.

“Our default position was non-intervention,” Goldfeder explained. “But then this concept emerged—a method to execute it surgically without impacting any other users.”

The strategy proved timely. Within hours of the council’s action, the exploiter started attempting to move and launder what remained of the stolen cryptocurrency, demonstrating how narrow the opportunity window actually was.

Arbitrum’s Security Council consists of 12 individuals chosen by Arbitrum token holders in elections held every six months via blockchain-based voting. The council possesses emergency authority that can be deployed without requiring a comprehensive community referendum.

Patrick McCorry, research director at the Arbitrum Foundation, emphasized that these capabilities have never been hidden. “The exact scope of their authority is publicly visible,” he noted, stressing that council members are “chosen through token holder elections, not appointed by our organization.”

The Governance Dilemma: Who Should Hold Power?

The freeze has reignited a persistent philosophical debate within cryptocurrency circles regarding the true nature of decentralization. At its core, the concept suggests that no centralized entity should possess the ability to reverse or override blockchain transactions after they’re executed—a philosophy commonly summarized as “code is law.”

Detractors contend the intervention demonstrates this principle is merely theoretical on Arbitrum. If a limited group can take action regarding stolen assets, that identical authority could theoretically be deployed in different scenarios—such as responding to government regulatory demands.

Goldfeder dismissed suggestions that a comprehensive token-holder referendum would have been suitable given the circumstances. “Consulting the DAO was impossible, because consulting the DAO essentially means consulting North Korea,” he stated, referencing investigative evidence connecting the perpetrator to state-sponsored actors.

Certain community members maintained the action warranted broader governance participation regardless. Arbitrum representatives countered that rapid response was critical and that public discussion would have alerted the attacker to impending countermeasures.

Emergency Safeguard, Not Centralized Authority

Arbitrum’s stance is that the Security Council functions as an emergency backstop mechanism, not a permanent governing body. The public visibility of its capabilities and its election-based composition are presented as proof that authority flows from the community rather than being unilaterally claimed.