news

Arbitrum Freezes 30,766 ETH worth of $71M Linked to Kelp Hack

Nidhi Saini
Published: April 21, 2026
4 min read
Arbitrum Freezes 30,766 ETH worth of $71M Linked to Kelp Hack

STAY UPDATED WITH COTI

Follow COTI across social media platforms to get the latest news, updates and community discussions.

Make us preferred on Google

Summary:

  • Arbitrum froze 30,766 ETH (~$71M) tied to the recent Kelp exploit.
  • Funds moved to a secure wallet, now locked under governance control.
  • Action followed a $293M Kelp hack linked to cross-chain bridge vulnerabilities.
  • Community reaction is split, with some questioning decentralization.
  • Incident highlights growing tension between security measures and crypto principles.

Arbitrum has taken direct action following one of the latest major DeFi exploits, freezing more than 30,000 Ether connected to the attack. The move came after the recent hack of Kelp DAO, which saw attackers drain roughly $293 million through a vulnerability tied to its cross-chain bridge infrastructure. As funds began moving across networks, a portion of the stolen assets - 30,766 ETH - ended up on Arbitrum. By Monday, Arbitrum's Security Council intervened.

"The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter's identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications." Source 

The funds were moved into a separate intermediary wallet, effectively locking them. At this point, they can no longer be accessed by the attacker and can only be moved through further governance decisions. This kind of intervention isn't common and that's exactly why it's drawing attention.

A Fast Response in a Complex Attack

The original exploit on Kelp wasn't isolated. It quickly spread across multiple protocols, creating what some described as a "contagion" effect in decentralized finance. Attackers didn't just steal funds - they used those assets as collateral. On platforms like Aave, the stolen tokens were used to borrow other cryptocurrencies, creating millions in bad debt across the system. This is where things get complicated. DeFi protocols are deeply interconnected. When one breaks, others can feel the impact almost immediately. The Kelp exploit itself was linked to its bridge infrastructure, powered by cross-chain technology. LayerZero, which is associated with the bridge, pointed to North Korean actors as potential perpetrators, adding another layer of urgency to the situation.

In that context, Arbitrum's decision starts to make more sense. By freezing the ETH before it could be moved further or laundered, the network effectively contained part of the damage. But containment came at a cost - at least in terms of perception.

READ MORE : Kelp Restaking Hack Spreads Risk Across DeFi, $293M Drained

Security vs Decentralization: a familiar tension returns

The reaction from the crypto community was immediate and divided. On one side, many saw the move as necessary. A large amount of stolen funds had been intercepted, potentially increasing the chances of recovery or at least preventing further harm. On the other side, critics raised a deeper concern. A user commented on X,

“so a council can just freeze 30k eth and we’re still calling this decentralized?” Source

Some users openly questioned the decision, pointing out that the ability to intervene at this level feels closer to traditional finance controls than to the original vision of permissionless systems. That tension isn't new, but it's becoming harder to ignore. Griff Green addressed the criticism by explaining that the decision wasn't taken lightly. He shared that the council went through extensive internal debate - technical, ethical, and even political - before acting. In the end, nine out of twelve members voted in favor of freezing the funds. And that's where the debate sits right now. Decentralization has always been about removing centralized control. But as the ecosystem grows and the stakes get higher, networks are being forced to make difficult trade-offs between staying hands-off and protecting users.

Arbitrum's Security Council, a group elected by the community, sits somewhere in the middle. It's not a single authority, but it's also not purely automated code.

Final thoughts

Arbitrum's decision to freeze over $71 million in ETH is both a security move and It protected the network from further fallout. But it also forced the community to confront a reality that's becoming more common - decentralization isn't always absolute. However, As DeFi grows, these kinds of decisions will likely happen again.

READ MORE: Hyperbridge Exploit Mints 1B Fake Polkadot Tokens, Attacker Walks Away With $237K

About the Project


About the Author

Nidhi Saini

Nidhi Saini

Nidhi Saini is a writer and co-founder of CotiNews, with over four years of experience working in Web3 marketing. She brings a practitioner’s perspective to her writing, shaped by years spent understanding how blockchain products are positioned, communicated, and adopted. As a co-founder, she is also involved in shaping the platform’s editorial direction, ensuring the publication stays thoughtful, credible, and grounded.

Disclaimer

The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official stance of CotiNews or the COTI ecosystem. All content published on CotiNews is for informational and educational purposes only and should not be construed as financial, investment, legal, or technological advice. CotiNews is an independent publication and is not affiliated with coti.io, coti.foundation or its team. While we strive for accuracy, we do not guarantee the completeness or reliability of the information presented. Readers are strongly encouraged to do their own research (DYOR) before making any decisions based on the content provided. For corrections, feedback, or content takedown requests, please reach out to us at

contact@coti.news

Stay Ahead of the Chain

Subscribe to the CotiNews newsletter for weekly updates on COTI V2, ecosystem developments, builder insights, and deep dives into privacy tech and industry.
No spam. Just the alpha straight to your inbox.

We care about the protection of your data. Read our Privacy Policy.