#ArbitrumFreezesKelpDAOHackerETH In a landmark intervention, **Arbitrum froze $71 million worth of Ethereum (30,766 ETH)** linked to a massive $292 million heist. This action, a first of its kind for a major Layer 2 network, has ignited fierce debate across the crypto world, challenging its principles of decentralization.



💣 The $292 Million Hack

On April 18, 2026, attackers exploited a vulnerability in Kelp DAO’s cross-chain bridge, which is built on LayerZero’s messaging protocol. They stole 116,500 rsETH, which is roughly 18% of the token's circulating supply. Kelp DAO is a liquid restaking protocol that routes user-deposited ETH through EigenLayer to generate additional yield, issuing rsETH as a receipt token.

The hack used a sophisticated technique, poisoning servers to force them to rely on compromised nodes and then issuing a malicious command to drain funds. A subsequent attempt to steal an additional 40,000 rsETH (worth ~$95 million) was blocked by Kelp DAO's emergency measures.

⚖️ The Freeze and the “1-of-1” Debate

Two days after the exploit, Arbitrum’s 12-member Security Council voted by 9 in favor to freeze the funds. The council said they "did not make this decision lightly," citing countless hours of ethical and technical debate.

The freeze has sparked accusations that Arbitrum is behaving like a centralized entity. In response, advocates argue that returning stolen money to victims is the right thing to do, highlighting the difficult ethical choice.

A major question is how such a hack could happen. LayerZero claims it was due to Kelp’s insecure “1-of-1” verifier setup, which created a single point of failure. KelpDAO counters that this setup was the default provided by LayerZero, and that the attack actually compromised LayerZero's own infrastructure.

🌀 The Aftermath

The freeze forced the attacker to quickly move the remaining funds, causing a frenzy of cross-chain activity.

· Laundering Efforts: The attacker routed about $176 million through THORChain, Chainflip, and Umbra, converting ETH to BTC. This caused THORChain's 24-hour trading volume to spike to $394 million, a massive increase from its usual daily average of $10–35 million.
· Market-wide Contagion: The exploit caused a chain reaction across DeFi. Aave froze its riskiest rsETH vaults to prevent a contagion of bad debt. Lido Finance also suspended deposits and withdrawals for its EarnETH vault, which held $21.6 million in a leveraged rsETH/ETH position that became stuck.

🔮 What Happens Next?

The frozen funds, now roughly a quarter of the total stolen, will likely be returned to Kelp DAO for redistribution. Despite this recovery, the fallout continues.

This event sets a powerful precedent. The line between a decentralized, censorship-resistant network and a pragmatic, secure financial system has blurred significantly. The debate—whether this was a heroic rescue or a betrayal of crypto’s founding principles—is only just beginning, and its resolution is being watched by the entire industry.

---

Want to share your thoughts? Like, retweet, and follow for more in-depth analysis.

#Arbitrum #KelpDAO #DeFi
ARB-1,84%
ETH-3,06%
ZRO2,4%
FLIP-0,88%
post-image
post-image
post-image
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin