Arbitrum Secures $71 Million in Ether Tied to Kelp DAO Exploit

A significant portion of the Kelp DAO funds is now frozen. Arbitrum's Security Council took emergency action on Monday, securing approximately $71 million worth of ETH by moving 30,766 ETH into an intermediary wallet. This wallet can only be accessed through further Arbitrum governance actions, effectively safeguarding the funds. The action was taken in response to the $292 million rsETH exploit that occurred on Saturday. rsETH is a liquid restaking token representing a user's position in restaked ether. The Security Council acted based on input from law enforcement regarding the exploiter's identity and executed the freeze without impacting any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This move recovers about a quarter of the total amount drained from Kelp's LayerZero-powered bridge, which was exploited by attackers who pulled 116,500 rsETH by compromising verifier infrastructure. The stolen funds are no longer under the control of the original address. Arbitrum, a layer-2 blockchain, has a Security Council with emergency powers to take protective action in such scenarios. However, governance-level interventions on user funds are rare and controversial due to the introduction of discretionary control over an otherwise permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any further recovery efforts by law enforcement and chain-tracing firms. This development also escalates the dispute between Kelp and LayerZero over responsibility for the exploit, as any broader socialization of remaining losses now has a $71 million offset. Kelp is coordinating with ecosystem partners on a recovery fund and considering next steps on unpausing, loss socialization, and legal coordination with affected counterparties. Whether more stolen funds can be frozen depends on the attacker's subsequent actions and the decisions of other chains with similar emergency powers.