The Arbitrum Security Council utilizes nine-of-twelve multi-signature authority to freeze and relocate 30,766 Ethereum (ETH). The move effectively activates a recovery mechanism for $71 million in assets tied to the April 18 KelpDAO cross-chain bridge exploit.
- The Arbitrum Security Council uses nine-of-twelve multi-signature authority to freeze 30,766 ETH following a $71 million bridge exploit.
- Attackers spoofed cross-chain messages via LayerZero to release unbacked rsETH tokens across 20 separate blockchains before the administrative seizure.
- This intervention establishes Arbitrum as a managed custodian rather than an immutable protocol, sacrificing decentralization to protect institutional capital flows.
Asset Migration and Administrative Intervention
Council members executed the migration 46 hours after the initial attack. Signatories moved the funds into a restricted intermediary wallet to prevent the perpetrator from laundering the capital.
The operation bypassed technical upgrades to the underlying protocol code. Officials instead exercised direct administrative control over specific ledger balances.
Forensic audit logs identified the root cause of the theft within the bridge architecture managed by LayerZero. According to LayerZero’s incident report, attackers spoofed a cross-chain message through the EndpointV2 contract.
The perpetrators exploited a “one-of-one” Data Verification Network (DVN) configuration. That single point of failure allowed a compromised validator to authorize the release of unbacked rsETH tokens across 20 separate blockchains.
Genuine News Deserves Honest Attention.
High-conviction projects require an intelligent audience. Connect with readers who value sharp reporting.
👉 Submit Your PRArbitrum Internal Deliberations and Governance
The decision to override the ledger state followed intense internal debates. Griff Green, a member of the Arbitrum Security Council, confirmed on X that the move resulted from “countless hours of debates, technical, practical, ethical and political.” The council did not publish a formal transcript of these discussions or the specific legal criteria used to justify the seizure.
Layer 2 projects moved toward emergency governance throughout 2025 to protect institutional capital from high-velocity exploits. The KelpDAO recovery represented the most aggressive application of these powers to date. The council’s action effectively designated the network as a managed platform where the Security Council retained administrative discretion over ledger states.
Chain Street’s Take
Arbitrum traded its “Code is Law” reputation for a $71 million insurance policy. The recovery marks a victory for KelpDAO users but serves as a mortality signal for the myth of L2 decentralization.
By acting as a quasi-custodian, the Security Council confirmed that Arbitrum operates as a managed platform where rules remain subject to committee debate. Participants on an L2 no longer trust the math alone. They trust the signatories not to push the “undo” button on their balances. The move solidified Arbitrum’s role as a platform for institutional capital that requires administrative recourse, but it permanently altered the network’s original “trustless” value proposition.
Activate Intelligence Layer
Institutional-grade structural analysis for this article.
