Arbitrum has reportedly frozen approximately 30,000 ETH, valued at roughly $71 million, that were linked to an exploit targeting Kelp DAO. The freeze represents one of the larger Layer 2 security interventions in recent months, though key details about the exploit and recovery process remain developing.
What Has Been Reported About the 30,000 ETH Freeze
Multiple outlets have reported that Arbitrum took action to freeze funds connected to the Kelp exploit. Cointelegraph reported that the frozen amount totals approximately $71 million in ether.
The Block separately confirmed the freeze, identifying Kelp DAO as the protocol at the center of the exploit. The action suggests that the exploited funds were bridged to or routed through Arbitrum’s network before being flagged.
It is important to note that the research underpinning this report is partial. Zero facts have been independently verified in this pipeline run, so the 30,000 ETH figure and freeze status are attributed entirely to the reporting outlets above. Readers should treat the specifics as developing rather than final.
The rsETH Incident and Why It Matters
The freeze appears connected to a broader incident involving rsETH, Kelp’s liquid restaking token. An incident report posted to the Aave governance forum on April 20, 2026, documents what happened with rsETH, indicating the exploit had downstream effects across DeFi protocols that integrated the token.
Kelp operates within the Ethereum restaking ecosystem, where tokens like rsETH represent staked positions that can be used as collateral across lending and borrowing protocols. When an exploit compromises a restaking token, the impact can ripple through multiple protocols that accept it as collateral.
Arbitrum, as one of Ethereum’s largest Layer 2 networks, serves as a major venue for DeFi activity. Funds moving through its bridge infrastructure can be flagged and frozen by the network’s sequencer under certain conditions, which appears to be what occurred in this case. Security incidents like this one highlight the growing complexity of cross-chain fund tracing, a challenge that has also surfaced in other recent events across the crypto ecosystem, including responses from exchanges like Bybit, which recently backed security-focused startup Hata in an $8 million Series A round.
What Comes Next for Affected Users
A freeze is a containment step, not a resolution. The 30,000 ETH being frozen does not guarantee that funds will be returned to affected users or that the full scope of the exploit has been identified.
Readers should watch for several concrete developments: an official post-mortem from Kelp DAO detailing how the exploit occurred, updates from Arbitrum on the status and conditions of the frozen funds, and any further incident reports from protocols like Aave that may have had exposure to rsETH collateral.
Fund-tracing efforts across Layer 2 networks and bridges will also be critical. On-chain investigators and protocol teams typically coordinate to map the full path of exploited funds, a process that can take days or weeks. The involvement of infrastructure providers like Coinbase, which recently expanded its developer tooling, and stablecoin issuers like Tether, which has been deepening its institutional partnerships, could become relevant if frozen funds touched their platforms.
No validated market data for ETH price or trading volume was available in this research cycle, so this report does not include price impact analysis. Any claims about ETH price movement in connection with the exploit would be speculative at this stage.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
