Arbitrum Secures $71 Million in Ether Following Kelp DAO Exploit

A substantial portion of the funds stolen from Kelp DAO is now frozen. Arbitrum's Security Council took action on Monday, securing approximately $71 million worth of ether by transferring 30,766 ETH into a restricted intermediary wallet. This wallet can only be accessed through additional governance procedures. The frozen funds are part of the $292 million stolen in the rsETH exploit that occurred on Saturday. rsETH is a token representing a user's stake in restaked ether. The Security Council, with input from law enforcement, identified the exploiter and executed the freeze without disrupting any users or applications on Arbitrum. The transfer was completed at 11:26 p.m. ET on April 20. This move has recovered about a quarter of the total amount drained from Kelp's LayerZero-powered bridge. The attack, which was attributed to North Korea's Lazarus Group, exploited compromised verifier infrastructure to steal 116,500 rsETH. Arbitrum, a layer-2 blockchain built on Ethereum, has a Security Council with emergency powers to protect the network. However, interventions on user funds are rare due to concerns about introducing discretionary control. The freeze provides Kelp with a partial recovery option, in addition to any further recoveries by law enforcement and chain-tracing firms. This development also escalates the dispute between Kelp and LayerZero over responsibility for the exploit, as the $71 million offset will be considered before any broader socialization of losses. Kelp is working with ecosystem partners on a recovery fund and exploring next steps, while LayerZero has not publicly commented on the Arbitrum freeze. The ability to freeze more stolen funds depends on the attacker's movements of rsETH and the actions of other chains with similar emergency powers.