Arbitrum Secures $71 Million in Ether Linked to Kelp DAO Exploit

A significant portion of the Kelp DAO funds is now frozen. Arbitrum's Security Council has taken action to secure 30,766 ETH, valued at approximately $71 million, by moving the funds linked to the $292 million rsETH exploit into a restricted intermediary wallet. This wallet can only be accessed through additional Arbitrum governance measures. The rsETH token, issued by KelpDAO, represents a user's stake in restaked ether. Following input from law enforcement regarding the exploiter's identity, the Security Council executed the freeze without impacting any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This move recovers about a quarter of the total amount drained from Kelp's LayerZero-powered bridge on Saturday, when attackers exploited compromised verifier infrastructure to pull 116,500 rsETH. Arbitrum, a layer-2 blockchain, has a Security Council with emergency powers to take protective action in such scenarios. However, interventions on user funds at the governance level are rare and controversial due to the introduction of discretionary control over an otherwise permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any further recoveries by law enforcement and chain-tracing firms. This development also escalates the ongoing dispute between Kelp and LayerZero over responsibility for the exploit, as any broader socialization of remaining losses now has a $71 million offset. Kelp is coordinating with ecosystem partners on a recovery fund and considering next steps, while LayerZero has not publicly commented on the Arbitrum freeze. The possibility of freezing more stolen funds depends on the attacker's movements of rsETH or its derivatives and whether other chains with similar emergency powers choose to act.