Arbitrum Freezes 30,766 ETH Linked to KelpDAO Exploit 

The Arbitrum Security Council froze 30,766 ETH in a response to a KelpDAO exploit late April 20, cutting off the attacker’s access to the funds in a rare emergency intervention on a Layer 2 network.

According to the Arbitrum team’s latest statement, the assets, worth more than $70.75 million at current prices, were held in an address on Arbitrum One linked to the exploiter.

As of 11:26 p.m. ET, the funds have been transferred to an intermediary wallet under restricted control, making them inaccessible to the original holder.

The move came with input from law enforcement, which provided information related to the exploiter’s identity, according to the council. The intervention followed an intensive technical review aimed at securing the funds without disrupting the broader network.

Arbitrum said the operation did not affect users, applications, or the chain’s overall state—an outcome likely to reassure developers and liquidity providers active on the network. 

The frozen ETH can now only be moved through further governance decisions, which will be coordinated with relevant external parties. 

The KelpDAO protocol suffered one of the largest decentralized finance security breaches of 2026 on April 18, after attackers siphoned an estimated $290 million in rsETH.

The incident, among the biggest this year, did not stem from a traditional smart contract bug but from a failure in the cross-chain infrastructure that connects different blockchain networks. The breach exposed vulnerabilities in so-called digital bridges, which are increasingly critical—and increasingly targeted—components of DeFi systems.

The attack has been tentatively linked to the North Korea-linked Lazarus Group, which is believed to have exploited a “single-verifier” weakness to validate fraudulent transactions that bypassed system safeguards.

The incident created a systemic shock across the DeFi ecosystem as the stolen assets were quickly moved into lending platforms like Aave to be used as collateral for further borrowing.

Freezing tens of millions of dollars in crypto shows that Arbitrum’s governance can step in directly to restrict access to large on-chain balances after an exploit, reinforcing confidence in its ability to respond to security incidents while also raising questions about the degree of decentralization and discretionary control within the network.

Discover DailyCoin’s hottest crypto scoops today:
TradFi Perpetuals Explode As Traders Chase 24/7 Gold & Oil
Binance to Delist Six Altcoins, Sparking a Quick Sell-off