Arbitrum Secures $71 Million in Ether Linked to Kelp DAO Exploit

A significant portion of the funds stolen from Kelp DAO is now frozen. Arbitrum's Security Council took action on Monday, securing approximately $71 million worth of ether by moving 30,766 ETH into a special wallet that can only be accessed through additional governance procedures. This action was taken in response to the $292 million rsETH exploit that occurred on Saturday. The rsETH token, issued by KelpDAO, represents a user's stake in restaked ether. The Security Council, with input from law enforcement regarding the exploiter's identity, executed the freeze without disrupting any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20, according to Arbitrum's statement. This move recovers about a quarter of the total amount stolen from Kelp's LayerZero-powered bridge, which was exploited by attackers who pulled 116,500 rsETH. The stolen funds are no longer controlled by the original address. Arbitrum, a layer-2 blockchain, has a Security Council with emergency powers to take protective action in such scenarios. However, interventions on user funds are rare and controversial due to the introduction of discretionary control over a permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any further actions by law enforcement and chain-tracing firms. It also escalates the dispute between Kelp and LayerZero over responsibility for the exploit, as any broader socialization of remaining losses now has a $71 million offset. Kelp is coordinating with ecosystem partners on a recovery fund and considering next steps, while LayerZero has not publicly commented on the Arbitrum freeze. The recovery of additional stolen funds depends on the attacker's movements of rsETH or its derivatives and whether other chains with similar emergency powers choose to act.