Arbitrum Secures $71 Million in Ether Tied to Kelp DAO Exploit

A significant portion of the Kelp DAO funds is now frozen. Arbitrum's Security Council took action on Monday, securing approximately $71 million worth of ether by transferring 30,766 ETH into a protected wallet. This wallet can only be accessed through additional governance procedures. The frozen funds are linked to the $292 million rsETH exploit that occurred on Saturday. rsETH is a liquid restaking token issued by KelpDAO, representing a user's stake in restaked ether. The Arbitrum Security Council acted swiftly, with input from law enforcement regarding the exploiter's identity, to freeze the funds without disrupting any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This move recovers about a quarter of the total amount drained from Kelp's LayerZero-powered bridge on Saturday, when attackers exploited compromised verifier infrastructure to pull 116,500 rsETH. The stolen funds are no longer controlled by the original address. Arbitrum, a layer-2 blockchain, has a Security Council with emergency powers to take protective action. However, interventions on user funds are rare and contentious due to the introduction of discretionary control over an otherwise permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any further actions law enforcement and chain-tracing firms can take. This development also escalates the ongoing dispute between Kelp and LayerZero over responsibility for the exploit, as any broader socialization of remaining losses now has a $71 million offset. Kelp is coordinating with ecosystem partners on a recovery fund and considering next steps on unpausing, loss socialization, and legal coordination with affected parties. Whether more stolen funds can be frozen depends on the attacker's movements of rsETH or its derivatives and whether other chains choose to act on their portions of the flow.