#kelpdaoexploitfreeze
On April 18, 2026, KelpDAO was hit by a massive exploit. A flaw in its rsETH bridge allowed attackers to mint unbacked tokens and drain $292M in assets.
⚡ Just two days later, Arbitrum’s Security Council took an unprecedented step: freezing 30,766 ETH (~$71M) from the exploiter’s wallet. This marks the first time a Layer‑2 intervened at protocol level to lock stolen funds.
🕵️♂️ Investigators suspect the Lazarus Group of North Korea, infamous for targeting DeFi protocols. Law enforcement agencies are now involved, raising questions about how “decentralized” DeFi really is when centralized freezes can occur.
📉 Fallout:
rsETH halted across DeFi platforms.
Aave exposed to potential bad debt of $124M–$230M.
Investor confidence in restaking projects shaken.
⚖️ Bigger picture:
This isn’t just another hack. It’s a test of DeFi’s core values. Can we still claim “code is law” when governance councils can blacklist wallets and freeze billions? Or is this the new reality of crypto security?