Cover photo

Arbitrum Freezes 30,766 ETH From KelpDAO Exploiter

The Arbitrum Security Council executed an emergency upgrade to freeze $71M in ETH tied to the KelpDAO exploit, briefly modifying an inbox contract to impersonate the exploiter.

The Arbitrum Security Council executed an emergency upgrade to freeze 30,766 ETH from an address involved in the KelpDAO exploit. As part of the recovery effort, $71 million in ETH was moved from the exploiter's wallet into a frozen intermediary address. The funds will remain frozen until an Arbitrum DAO vote approves further action.

Council member Patrick McCorry explained that the council briefly modified the chain's inbox contract on L1 to include a function enabling cross-chain messages that could impersonate any sender. Using this capability, a single transaction impersonated the exploiter's address to transfer the funds. Immediately afterward, the inbox contract was restored to its original state.

The Arbitrum DAO will need to decide how to allocate the recovered funds. It will need to determine whether to use them to compensate Aave users for losses or return them to KelpDAO to help restore rsETH backing.


Sponsored by

Lido Earn

EarnUSD is a stablecoin vault by Lido for earning transparent, onchain USD-denominated rewards. Get started today at stake.lido.fi/earn


Disclaimer: Content is for informational purposes only, not endorsement or investment advice. The accuracy of information is not guaranteed.