Arbitrum Freezes $71M
- Arbitrum froze roughly $71 million worth of ETH tied to a KelpDAO-related exploit. - The paused balance was identified and isolated to prevent further suspicious transfers. - The action came amid wider crypto volatility and market chatter about short-term ETH and BTC dips ( ).
Arbitrum’s security council froze 30,766 ETH tied to the KelpDAO exploit, locking about $71 million in a wallet the attacker can’t move. (forum.arbitrum.foundation) The council said it executed the emergency action at 11:26 p.m. Eastern on April 21, 2026, on Arbitrum One. The frozen balance was 30,765.6675 ETH, and any further movement now requires additional governance action. (forum.arbitrum.foundation) The freeze followed the April 18 KelpDAO breach, in which an attacker minted or released 116,500 rsETH with no backing and drained roughly $290 million to $292 million. KelpDAO said that day it had paused rsETH contracts across Ethereum mainnet and several layer-2 networks while it investigated. (layerzero.network, cryptopotato.com) KelpDAO’s product is a liquid restaking token: users deposit Ether and receive rsETH, a tradable receipt token they can use elsewhere in decentralized finance. In this case, LayerZero said the exploited setup used a single verifier path for KelpDAO’s bridge, and that configuration let a forged cross-chain message pass as valid. (layerzero.network) LayerZero said the incident was isolated to KelpDAO’s rsETH configuration rather than the broader protocol, and it preliminarily attributed the attack to a “highly-sophisticated state actor,” likely North Korea’s Lazarus Group, specifically TraderTraitor. KelpDAO has disputed parts of the blame narrative in public reporting, and the attribution has not been independently confirmed by law enforcement. (layerzero.network, financefeeds.com) The Arbitrum intervention recovered only part of the stolen value. CoinDesk and Unchained reported the frozen ETH represented roughly one quarter of the haul, after the attacker had already moved funds across chains and into other assets. (coindesk.com, unchainedcrypto.com) That speed has reopened a familiar crypto argument. Arbitrum’s emergency powers let a 12-member security council act quickly in a crisis, but the same mechanism also shows that a major “decentralized” network can still freeze funds by committee vote. (forum.arbitrum.foundation, decrypt.co) The next step is governance, not code. Arbitrum said the ETH now sits in an intermediary wallet, and any release, return, or other disposition will need follow-on action through the network’s formal process. (forum.arbitrum.foundation, coindesk.com)
