Arbitrum Secures $71 Million in Ether Tied to Kelp DAO Exploit

A significant portion of the funds stolen from Kelp DAO is now frozen. Arbitrum's Security Council took decisive action on Monday, locking down approximately $71 million worth of ether. This move follows the $292 million rsETH exploit that occurred on Saturday. The frozen funds, totaling 30,766 ETH, have been transferred to an intermediary wallet, which can only be accessed through additional governance actions. The rsETH token, issued by KelpDAO, represents a user's stake in restaked ether. The Security Council's decision was made with input from law enforcement, who identified the exploiter. The council ensured that the freeze did not affect any Arbitrum users or applications. The transfer was completed at 11:26 p.m. ET on April 20. This move recovers about a quarter of the total amount stolen from Kelp's LayerZero-powered bridge. The attack, attributed to North Korea's Lazarus Group, exploited compromised verifier infrastructure. As a layer-2 blockchain, Arbitrum's Security Council has emergency powers to take protective action. However, such interventions are rare and controversial, as they introduce a level of discretionary control over an otherwise permissionless network. The freeze provides Kelp with a partial recovery option, in addition to any further actions taken by law enforcement and chain-tracing firms. This development also escalates the dispute between Kelp and LayerZero over responsibility for the exploit. Kelp is currently coordinating with ecosystem partners on a recovery fund and weighing next steps. The ability to freeze additional stolen funds depends on the attacker's movements and whether other chains take similar actions.