Arbitrum Freezes $70 Million in ETH Linked to KelpDAO Exploit in Emergency Security Move
Arbitrum mentioned its Security Council initiated an emergency intervention to safe funds linked to the latest KelpDAO exploit after figuring out 30,766 ETH held on Arbitrum One in an deal with tied to the attacker.
User exercise remained unaffected throughout the course of.
Arbitrum Security Council Steps In
The council said it had coordinated with regulation enforcement concerning the exploiter’s id and that the motion was carried out with a give attention to preserving community integrity.
After conducting technical evaluation and inside deliberations, Arbitrum’s council applied a technique to isolate and switch the funds with out affecting another chain state or its customers. The belongings have been moved to an middleman pockets, successfully freezing them and eradicating entry from the unique deal with.
According to the official announcement, the switch was completed on April 20 at 11:26 pm ET. Any additional motion of the funds would require governance-level choices in coordination with related stakeholders.
Just earlier than the intervention, Onchain Labs reported that the exploiter appeared to have burned 30,766 ETH, value $70.94 million on Arbitrum.
KelpDAO Hack
The incident traces again to the KelpDAO exploit on April 18, which led to the lack of about 116,500 rsETH tokens, value round $292 million. It was one of many largest DeFi breaches this 12 months. The attackers targeted KelpDAO’s cross-chain bridge constructed on LayerZero Labs infrastructure. According to LayerZero, the attacker gained entry to parts of its decentralized verified community by compromising RPC nodes and disrupting regular operations, which allowed a fraudulent cross-chain message to be permitted and executed.
LayerZero blamed the dimensions of the breach on KelpDAO’s use of a 1-of-1 verification setup, which lacked impartial validation. KelpDAO, in response, said,
“The 1-of-1 DVN setup is the configuration documented in LayerZero’s documentation and shipped because the default for any new OFT deployment. Kelp has operated on LayerZero infrastructure since January 2024 and has maintained an open communication channel with the LayerZero staff all through. The query of DVN configuration got here up throughout Kelp’s L2 growth, and defaults have been affirmatively confirmed as acceptable at the moment.”
The affect spread past the bridge as a big portion of the stolen belongings moved into lending protocols. On Aave V3, for example, the attacker deposited rsETH as collateral and borrowed massive quantities of wrapped ETH. These positions have been left with low well being elements, which raised the potential of dangerous debt inside the protocol.
The submit Arbitrum Freezes $70 Million in ETH Linked to KelpDAO Exploit in Emergency Security Move appeared first on CryptoPotato.
