Arbitrum Security Council Freezes $71M in ETH Linked to Kelp DAO Exploit
Arbitrum's Security Council says it has frozen $71 million in ETH traced to the Kelp DAO exploit, locking the assets so they cannot be moved unless a follow-up measure is approved through Arbitrum's governance process. That procedural requirement effectively shifts the next decision from the council to ARB token holders.
The council, a multisignature body with emergency powers, said it identified wallet addresses holding ETH tied to the exploit and executed an on-chain freeze that immobilizes the funds at the protocol level. Under Arbitrum's governance design, emergency actions of this kind are not meant to conclude unilaterally: any subsequent movement of the frozen ETH must be authorized by a governance vote.
A Security Council member, Griff Green (griff.eth), said the decision followed "countless hours" of debate across technical, practical, ethical, and political considerations.
Several key details remain unverified by this outlet at the time of writing. Transaction hashes, wallet addresses, and the precise execution timeline have not been independently published in a form that can be confirmed here. The $71 million figure and the governance handoff mechanism come from the Security Council's public statement, which currently serves as the main documentary record. Materials available so far also do not fully explain the exploit's attack vector or the exact path by which the stolen ETH reached addresses accessible on Arbitrum.
What is clear is that the freeze represents a direct use of Arbitrum's Layer 2 administrative authority over assets within its network, distinct from actions such as a stablecoin issuer blacklisting an address at the token-contract level. The council's public commitment to route any next steps through governance, rather than retaining unilateral control, sets a notable procedural precedent.
For users affected by the Kelp DAO exploit, the freeze may help contain further laundering through Arbitrum-connected infrastructure, but it does not guarantee restitution. The governance process could lead to multiple outcomes, including returning funds to victims, transferring assets to a recovery multisig, or a prolonged dispute over legal and technical parameters for redistribution.
The upcoming vote is also likely to surface broader questions about legitimacy and precedent, including whether ARB token holders should direct the movement of funds originating from an exploit in a separate protocol. Observers expect the outcome to become a reference point for future DeFi incidents.
The episode follows other recent protocol-level crises, including the CoW Swap frontend compromise earlier this year, which highlighted how quickly governance can be pushed to act under pressure.
Separately, Tron's Justin Sun posted a comment on April 21, 2026, claiming Tron is "the most decentralized blockchain in the world."