Arbitrum Freezes $71M ETH in Kelp DAO Hack Response

Arbitrum’s Security Council just locked down $71 million in stolen Ethereum from the massive Kelp DAO hack. This bold move recovers a chunk of the $292 million lost in one of 2026’s biggest DeFi blows. But it sparks big questions. Can Layer 2 networks act like cops in a crisis?

Kelp DAO suffered a huge hit on April 19, 2026. Hackers drained 116,500 rsETH tokens worth about $292 million. The attack struck at 5:35 p.m. UTC through a flaw in its LayerZero bridge.

RsETH is restaked Ether, a hot token in DeFi for earning yields on yields. The bridge let users move it across chains. Attackers tricked the system into releasing funds to their control.

Panic spread fast. Aave froze rsETH markets to stop runs. Its token AAVE dropped 10 percent in hours as bad debt fears grew.

The exploit wiped out 18 percent of rsETH’s supply and tested lending giants like Aave.

Kelp paused its contracts minutes later. It teamed up with LayerZero and auditors to probe. LayerZero later blamed North Korea’s Lazarus Group for poisoning RPC nodes.

Arbitrum Steps Up with Emergency Freeze

Arbitrum’s Security Council moved quick on April 21. They froze 30,766 ETH sitting in a hacker-linked wallet on Arbitrum One. That stash hit $71 million at the time.

Nine of 12 council members greenlit the action. They worked with law enforcement on the hacker’s ID. The goal stayed clear: protect users without touching legit funds.

Funds now sit in a special wallet at 0x0000000000000000000000000000000000000DA0. No one moves them without a full governance vote from ARB holders.

This grab pulls back roughly a quarter of the Kelp loot. It shows Layer 2s can fight back in real time.

How the Technical Freeze Worked

The council pulled off a slick trick. They upgraded Ethereum’s Inbox contract for Arbitrum. This let them mimic the hacker’s address.

One atomic step transferred the ETH across chains to the safe spot. Then they snapped the contract back to normal.

No other users felt a thing. Arbitrum shared full transaction details on its forum.

This precision sets Arbitrum apart from slower DAO votes.

Governance Takes the Wheel Next

ARB token holders hold the power now. Any release needs their approval through formal proposals. The council promises close work with victims and cops.

Kelp pushes a recovery fund. LayerZero fingers the hackers but skips the freeze talk.

• Aave users faced withdrawal jams from rsETH ties.
• Ethena paused LayerZero bridges as caution.
• DeFi TVL dipped across top chains post-hack.

Freezing thief funds boosts trust but tests DeFi’s core promise of no middlemen.

Critics worry it opens doors to overreach. Fans cheer the save. Justin Sun even called Tron more decentralized over it.

Arbitrum’s play proves Layer 2 governance can handle crises faster than old-school chains or cops. It shifts power from exchanges to communities. Victims might get cash back soon. Yet it reminds everyone: even in crypto, quick fixes carry risks.

This saga leaves DeFi stronger yet watchful. Hackers lost big here, but the centralization debate rages on.