Arbitrum Freezes 30,766 ETH Tied to KelpDAO Exploit

The Arbitrum Security Council has frozen 30,766 ETH linked to the KelpDAO exploit, deploying its emergency powers to prevent the attacker from moving stolen funds through the Layer 2 network.

Why Arbitrum Froze 30,766 ETH Linked to the KelpDAO Exploit

The freeze targets funds that ended up on Arbitrum following what KelpDAO has described as a bridge vulnerability affecting its rsETH token. The KelpDAO bridge incident resulted in roughly $290 million in losses, making it one of the largest DeFi exploits this year.

KelpDAO acknowledged the incident publicly and pointed to LayerZero default configurations as a contributing factor. The Arbitrum Security Council acted after a portion of the exploited funds, specifically 30,766 ETH, was identified on the network.

Arbitrum’s Security Council is a multisig body with the authority to execute emergency actions on the network without a full governance vote. The council confirmed the freeze, marking one of the most significant emergency interventions in the network’s history.

What Is Confirmed and What Remains Open

The confirmed facts are narrow: 30,766 ETH linked to the KelpDAO exploit has been frozen on Arbitrum, and the Security Council authorized the action. The connection between the frozen funds and the broader $290 million incident has been stated by both Arbitrum and KelpDAO but the full on-chain trail has not been independently published in detail.

Several key questions remain unanswered. The exact exploit mechanics, whether additional funds sit on other chains, and whether any portion of the stolen ETH moved before the freeze took effect are all unresolved. The Aave governance forum has opened a discussion thread on the rsETH incident, suggesting the exploit’s ripple effects extend into lending protocols that accepted rsETH as collateral.

The incident echoes other recent security events across DeFi. Separately, Grinex was reportedly hacked amid sanctions scrutiny, underscoring a broader pattern of exploit activity in recent weeks.

What the Freeze Means for Arbitrum, KelpDAO Users, and Next Steps

For KelpDAO users, the freeze is a step toward potential fund recovery, though no timeline or process for returning assets has been announced. The 30,766 ETH represents only a portion of the total losses, and recovery of the remaining funds depends on investigations across multiple chains.

The Security Council’s intervention raises familiar questions about decentralization trade-offs. Arbitrum’s ability to freeze assets at the protocol level demonstrates an emergency safeguard, but it also highlights the concentrated authority held by a small multisig group. This tension between security and permissionlessness is central to the ongoing discussion around the KelpDAO bridge vulnerability and how DeFi protocols handle cross-chain risk.

Readers should watch for several near-term developments: whether KelpDAO publishes a full post-mortem, whether the Arbitrum DAO ratifies the Security Council’s emergency action through a formal governance vote on Tally, and whether additional frozen funds are identified on other networks. The outcome of ongoing legislative efforts around crypto market structure may also shape how similar incidents are handled in the future.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.