Multi-Million Dollar Ethereum Lockdown: Arbitrum Secures Funds Tied to Recent Kelp Security Breach

The Arbitrum Security Council froze 30,766 ether (ETH) on 20 April 2026. Arbitrum is a layer-2 network built on top of the Ethereum blockchain. The frozen ETH was worth approximately $71 million at the time of the action. The funds were moved into an intermediary wallet controlled by Arbitrum governance.
"Emergency action to freeze 30,766 Ether (ETH) that was held in a wallet connected to the Kelp exploit", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Frozen funds linked to $293 million Kelp hackThe frozen ETH traces to an exploit of Kelp DAO, a decentralised finance (DeFi) restaking protocol. DeFi refers to financial services that run on public blockchains without central intermediaries. Attackers drained approximately 116,500 ETH from Kelp DAO between 17 and 18 April 2026. Multiple blockchain security sources estimated the total loss at $293 million.
"No longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance.", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Governance vote required to release frozen assetsThe frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. "Emergency action to freeze 30,766 Ether (ETH) that was held in a wallet connected to the Kelp exploit", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Frozen funds linked to $293 million Kelp hackThe frozen ETH traces to an exploit of Kelp DAO, a decentralised finance (DeFi) restaking protocol. DeFi refers to financial services that run on public blockchains without central intermediaries. Attackers drained approximately 116,500 ETH from Kelp DAO between 17 and 18 April 2026. Multiple blockchain security sources estimated the total loss at $293 million.
"No longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance.", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Governance vote required to release frozen assetsThe frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. Frozen funds linked to $293 million Kelp hackThe frozen ETH traces to an exploit of Kelp DAO, a decentralised finance (DeFi) restaking protocol. DeFi refers to financial services that run on public blockchains without central intermediaries. Attackers drained approximately 116,500 ETH from Kelp DAO between 17 and 18 April 2026. Multiple blockchain security sources estimated the total loss at $293 million.
"No longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance.", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Governance vote required to release frozen assetsThe frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. The frozen ETH traces to an exploit of Kelp DAO, a decentralised finance (DeFi) restaking protocol. DeFi refers to financial services that run on public blockchains without central intermediaries. Attackers drained approximately 116,500 ETH from Kelp DAO between 17 and 18 April 2026. Multiple blockchain security sources estimated the total loss at $293 million.
"No longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance.", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Governance vote required to release frozen assetsThe frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. "No longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance.", 21 April 2026. — Arbitrum Security Council, 12-member governance body, Arbitrum
Governance vote required to release frozen assetsThe frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. Governance vote required to release frozen assetsThe frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. The frozen wallet is not accessible to the address that originally held the funds. Any movement of the 30,766 ETH requires a formal decision by Arbitrum governance. Governance in this context means a vote among token holders who control the network's rules and treasury. No governance decision on the funds had been announced as of 21 April 2026.
North Korea attribution reported but unconfirmedSpeculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. Speculation: One secondary source reported that LayerZero accused North Korea of carrying out the Kelp exploit. No blockchain forensics firm independently confirmed this attribution as of 21 April 2026. Cryptocurrencies are highly volatile and involve significant risk. You may lose part or all of your investment. All information on Coinpaprika is provided for informational purposes only and does not constitute financial or investment advice. Always conduct your own research (DYOR) and consult a qualified financial advisor before making investment decisions. Coinpaprika is not liable for any losses resulting from the use of this information.