Arbitrum Secures $71 Million in Ether Linked to Kelp DAO Exploit

A significant portion of the funds stolen from Kelp DAO is now frozen. Arbitrum's Security Council took swift action, moving 30,766 ETH, worth around $71 million, into a secure wallet on Monday night. This action was taken in response to the $292 million rsETH exploit that occurred on Saturday. The frozen funds are linked to the exploit and are now inaccessible without further governance intervention. The rsETH token, issued by KelpDAO, represents a user's stake in restaked ether. The Security Council's decision was made with input from law enforcement, who provided information about the exploiter's identity. The council executed the freeze without disrupting any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This move has recovered roughly a quarter of the total amount stolen from Kelp's LayerZero-powered bridge on Saturday. The attack, attributed to North Korea's Lazarus Group, resulted in the theft of 116,500 rsETH. Arbitrum, a layer-2 blockchain, has a Security Council with the power to take emergency actions to protect the network. However, such interventions are rare and can be controversial, as they introduce a level of discretionary control over the otherwise permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any further recovery efforts by law enforcement and chain-tracing firms. This development also escalates the ongoing dispute between Kelp and LayerZero over who bears responsibility for the exploit. Kelp is currently coordinating with ecosystem partners to establish a recovery fund and is considering its next steps. The ability to freeze additional stolen funds depends on the attacker's movements of rsETH or its derivatives and whether other chains with similar emergency powers choose to act.