According to reports from AMBCrypto, Arbitrum confirmed that its Security Council successfully froze 30,766 ETH worth approximately $71 million tied to the KelpDAO exploit. The funds were moved to a governance-controlled intermediary wallet, cutting off the exploiter's access and preventing further dispersal across blockchain networks. This intervention secured roughly one-fourth of the total assets lost in the $294 million rsETH exploit on KelpDAO's LayerZero-powered bridge. As reported by Coinspeaker, the freeze is a necessary but not sufficient condition for recovery, as it prevents further laundering through Arbitrum-connected infrastructure but does not automatically translate into restitution for affected users.
Despite the Arbitrum freeze, the attacker has reportedly laundered the stolen funds through THORChain network. According to Arkham's data, the stolen ETH was divided into three wallets: 25K ETH worth $57.6 million, 25.7K ETH worth $59.2 million, and 25K ETH worth $57.9 million. The third wallet containing 25K ETH started laundering operations and is now left with only 3.8K ETH worth $8 million. The laundered funds were bridged to Bitcoin via THORChain, with the network earning $660K in fees during the 24-hour period when swap volume reached $540 million. THORChain enabled this laundering by allowing asset swaps across blockchains without Know Your Customer (KYC) requirements, making it simpler for the attacker to move funds.
As reported by AMBCrypto, Arbitrum did not wait for full attribution before taking action. The Security Council used emergency powers to move assets before they dispersed across chains, demonstrating the effectiveness of the platform's multisig emergency framework. According to Coinspeaker, the mechanism functions as follows: the Arbitrum Security Council, a multi-signature body with emergency powers over the Arbitrum network, identified the wallet addresses holding ETH connected to the KelpDAO exploit and executed a freeze that immobilizes those funds at the protocol level. This structure allows a small group of elected signers to act during critical events without waiting for full governance voting.
Under Arbitrum's governance architecture, emergency council actions of this type do not finalize unilaterally – any subsequent movement of the frozen ETH requires a governance vote, meaning the ultimate disposition of the $71 million now rests with a community process rather than with the council's discretion alone. As reported by Coinspeaker, the governance process that must now determine the funds' fate could produce a range of outcomes, from a direct return to affected users to a transfer to a recovery multisig to a prolonged dispute over the legal and technical mechanics of redistribution. The technical attack vector through which the Kelp DAO exploit was executed has not been fully detailed, though the council's freeze represents a deliberate exercise of Arbitrum's Layer 2 administrative authority over assets residing within its network boundaries.
The dramatic recovery and subsequent laundering has sparked intense debate about the true nature of decentralization in cryptocurrency. According to Altfins, prominent commentator Deeastar views this as undeniable proof that "nothing in crypto is truly decentralized," arguing that a 12-member, elected governance body possesses the power to seize assets, challenging the very notion of immutable, censorship-resistant blockchains when substantial stakes are involved. However, Ripple CTO David Schwartz has defended the decision, comparing it to Bitcoin's 2010 rollback response to an overflow bug that created over 184 billion BTC. The fund freeze drew mixed reactions from the crypto community, with some users criticizing Arbitrum for interfering with network operations, noting that such actions run counter to decentralization principles, while others believe such measures are necessary in emergency cases to protect the ecosystem. The involvement of Arbitrum has raised concerns about DeFi being truly permissionless and immutable, with on-chain investigator Specter noting that DPRK remains a major threat to the ecosystem.
