Arbitrum Security Council Freezes $71 Million in Ether Linked to Kelp DAO Exploit

A significant portion of the funds stolen from Kelp DAO is now inaccessible. Arbitrum's Security Council took swift action, freezing approximately $71 million worth of ether on Monday evening. This move was made in response to the $292 million rsETH exploit that occurred on Saturday. The frozen funds, totaling 30,766 ETH, are now held in an intermediary wallet that can only be accessed through additional governance action. The rsETH token, issued by KelpDAO, represents a user's stake in restaked ether. The Security Council's decision to freeze the funds was made with input from law enforcement, who have identified the exploiter. The council emphasized that this action was taken without disrupting any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This action recovers roughly a quarter of the total amount stolen from Kelp's LayerZero-powered bridge on Saturday, when attackers exploited compromised verifier infrastructure to pull 116,500 rsETH. The stolen funds are no longer under the control of the original address. Arbitrum, a layer-2 blockchain, has a Security Council with the power to take emergency action to protect the network. However, such interventions are rare and controversial, as they introduce a level of discretionary control over an otherwise permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any other funds that law enforcement and chain-tracing firms may be able to recover. This development also escalates the ongoing dispute between Kelp and LayerZero over who bears responsibility for the exploit. Kelp is currently coordinating with ecosystem partners on a recovery fund and weighing its next steps. Whether additional stolen funds can be frozen depends on the attacker's movements of rsETH or its derivatives and whether other chains with similar emergency powers choose to act.