Arbitrum freezes $71 million in ether tied to Kelp DAO exploit
CoinDesk·60-word summary·1 min read
Arbitrum's security council froze 30,766 ETH, worth about $71 million, in a wallet linked to the Kelp DAO exploit. This move aims to prevent further losses while governance decides on next steps. The incident highlights risks in DeFi security, especially with single-verifier protocols, raising questions about the safety of such systems.
Hackers stole 116,500 rsETH tokens worth $292 million from Kelp DAO’s LayerZero bridge on April 18. They used the stolen tokens as collateral on Aave V3 to borrow wrapped Ether. Aave’s risk managers outlined two bad debt scenarios: $123.7 million or $230.1 million, causing a crisis for Kelp DAO and LayerZero.
On April 18, a Justin Sun-linked wallet withdrew 274 million USDT from Aave shortly after the protocol froze its rsETH markets following the KelpDAO exploit. The withdrawal occurred just 21 minutes after the freeze, raising concerns about potential security and liquidity issues linked to the wallet. This incident highlights ongoing risks in DeFi security and asset management.
Ripple aims to make the XRP Ledger quantum-resistant by 2028, unveiling a four-phase plan. Phase 1 includes an emergency "Q-Day" migration to quantum-safe accounts, while Phase 2, underway, involves a vulnerability assessment expected to finish in the first half of 2026. Ripple has partnered with quantum security firm Project Eleven to accelerate this security upgrade.
Arbitrum’s Security Council has frozen 30,766 ETH, worth approximately $71 million, linked to the Kelp DAO exploit on April 21, 2026. The funds were moved to a governance-controlled wallet, preventing access by the attacker. This freeze accounts for about a quarter of the $292 million stolen in the hack, which LayerZero preliminarily attributed to North Korea’s Lazarus group.
AAVE’s token dropped 26% after a $292 million hack linked to Kelp DAO. The attacker drained rsETH tokens, used as collateral on Aave V3, causing $280 million in bad debt. Total value locked fell over a third to $17.5 billion, with $9 billion in net outflows. The incident raises concerns about DeFi security and liquidity risks.
A fake police raid led to a $1 million Bitcoin theft, highlighting the rise of physical threats to crypto assets. Wrench attacks are increasingly used to force transfers, exposing new security risks beyond digital hacks. The incident underscores the need for enhanced security measures in crypto custody and transfer processes.