Arbitrum Freezes $71M in ETH Linked to Kelp DAO Hack

Arbitrum’s security council froze 30,766 ETH—roughly $71.2 million—on Monday after tracing the funds to wallets connected to last week’s $293 million Kelp DAO exploit. The move recovered nearly a quarter of the stolen assets but immediately reignited the crypto community’s oldest argument: when does security trump decentralization?

The frozen ETH now sits in an intermediary wallet controlled by Arbitrum governance, inaccessible to the original holder. Nine of the 12-member security council voted to execute what Arbitrum called “emergency action,” a decision council member Griff Green said came after “countless hours of debates, technical, practical, ethical and political.”

The Kelp Fallout Spreads

Saturday’s attack on Kelp’s LayerZero-powered bridge didn’t stay contained. The liquid restaking protocol, which lets users convert staked ETH into rsETH tokens for additional yield through EigenLayer, became a vector for broader DeFi contagion.

Attackers used stolen Kelp tokens as collateral on Aave, borrowing crypto against assets they didn’t legitimately own. The result: millions in “bad debt” now polluting the lending market. LayerZero has pointed the finger at North Korea’s Lazarus Group, the state-sponsored hacking unit responsible for billions in crypto theft over the past decade.

ETH dropped 5.62% in the 24 hours following the freeze announcement, trading at $1,975 as of Tuesday morning. Whether that’s hack-related selling pressure or broader market weakness remains unclear.

Decentralization Theater?

Critics wasted no time. “So a council can just freeze funds by decree?” one user posted on X, echoing a sentiment that spread quickly through crypto circles.

The counterargument writes itself: $71 million recovered, likely from state-sponsored thieves, with no impact on legitimate users. Arbitrum emphasized the council acted with law enforcement input and without affecting any applications running on the network.

But the precedent matters. A 12-person committee—elected by ARB token holders, sure—just demonstrated it can immobilize any funds on the network given sufficient justification. For a technology built on the promise of permissionless transactions, that’s either a necessary safety valve or a fundamental contradiction.

What Happens Next

The frozen ETH can only move through further governance action, meaning ARB holders will likely vote on its fate. Options range from returning funds to affected Kelp users to holding them pending law enforcement proceedings.

Kelp’s rsETH contracts remain paused. The protocol’s founders, Amitej G and Dheeraj B—who previously built Stader Labs—haven’t announced a recovery timeline. For the thousands of users who deposited stETH, rETH, or cbETH seeking extra yield, their capital remains locked in a protocol that just became a case study in DeFi risk.

The Lazarus Group, if indeed responsible, has already moved the remaining $220 million through various chains. Arbitrum caught what it could. The rest is likely gone.

Image source: Shutterstock