Arbitrum Seizes $71 Million in Ether Linked to Kelp DAO Breach

A significant portion of the funds stolen from Kelp DAO is now frozen. Arbitrum's Security Council took action on Monday, securing approximately $71 million worth of ether by transferring 30,766 ETH into a restricted intermediary wallet. This wallet can only be accessed through additional governance measures. The frozen funds are connected to the recent $292 million rsETH exploit. rsETH is a token representing a user's stake in restaked ether, issued by KelpDAO. The Security Council's decision was made with input from law enforcement, who identified the exploiter. The council ensured that the freeze did not affect any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This move recovers about a quarter of the total amount stolen from Kelp's LayerZero-powered bridge on Saturday. The attack, attributed to North Korea's Lazarus Group, exploited compromised verifier infrastructure, resulting in the theft of 116,500 rsETH. As a layer-2 blockchain, Arbitrum processes transactions more efficiently and settles them on the main Ethereum chain. Its Security Council has the authority to take emergency actions to protect the network. However, such interventions on user funds are rare and controversial, as they introduce a level of discretionary control. The freeze provides Kelp with a partial recovery option, in addition to any further actions taken by law enforcement and chain-tracing firms. This development also escalates the dispute between Kelp and LayerZero over responsibility for the exploit, as the $71 million offset may impact the distribution of remaining losses. Kelp is currently working with ecosystem partners to establish a recovery fund and is considering its next steps. The possibility of freezing additional stolen funds depends on the attacker's actions and the responses of other chains with similar emergency powers.