Arbitrum's $71 million recovery from KelpDAO exploit sparks DeFi debate

• Arbitrum froze $71M linked to the KelpDAO exploit via its Security Council, sparking debate over decentralization in Layer-2 networks.
• Top industry figures defended the governance intervention as the right move, while others warned of centralization risks.
• The recovery follows KelpDAO's $292 million exploit last week, in which attackers manipulated a cross-chain bridge to mint unbacked rsETH.

Arbitrum's (ARB) $71 million recovery of stolen funds linked to the KelpDAO exploit has triggered a broad debate over decentralization across the crypto community.

The action, carried out by Arbitrum's Security Council, drew mixed reactions across the crypto ecosystem. Supporters described it as a necessary step to protect users and maintain network stability. 

On the other hand, critics argued that it signals the presence of centralized control mechanisms in Layer-2 systems, raising questions about the validity of permissionless ownership.

Crypto community response to Arbitrum's KelpDAO decision exposes divide over decentralization

Charles Guillemet, chief technology officer (CTO) at Ledger, described the incident as a reflection of existing design realities rather than a deviation from them. He noted that the freeze made visible the governance structures already embedded in such systems and characterized the move as a legitimate administrative action.

"This is not a secret or an abuse. It's a documented property of Arbitrum, and of every other major L2 today. By L2Beat's framework, Arbitrum is a Stage 1 rollup: a trusted multisig can upgrade the system and, in emergencies, alter state," he wrote in a Tuesday X post.

Helius CEO Mert Mumtaz also defended the intervention, arguing that Arbitrum's governance model is well understood and that using its control mechanisms during an exploit is appropriate.

He noted in an X post that the presence of a multisignature security council reduces reliance on a single point of failure and reflects a level of decentralization comparable to some Layer-1 networks. He added that attention should focus on accelerating the transition of rollups to more trust-minimized systems.

Additionally, David Hoffman of Bankless supported the move, describing it as an example of coordinated decision-making in response to an urgent threat. He suggested it could help define how decentralized systems respond to similar incidents.

However, Curve Finance founder Michael Egorov offered a more cautious view, noting that while the action may have been justified, it could lead users to reassess the neutrality of such networks. He added that the ability to freeze funds may invite comparisons to traditional financial oversight frameworks.

Others questioned the authenticity of decentralization in DeFi protocols, citing that the intervention reveals a centralized point of failure in what is marketed as permissionless infrastructure.

The intervention followed a major exploit over the weekend in which attackers compromised a KelpDAO wallet and stole approximately $292 million in rsETH tokens. A portion of those funds, totaling 30,766 ETH, was later bridged to Arbitrum One.

Arbitrum noted that its 12-member Security Council acted after receiving information from law enforcement regarding the suspected exploiter. Following internal review and technical validation, the council froze the funds and transferred them to a restricted wallet, preventing further movement.

Arbitrum said the action was designed to isolate compromised assets without disrupting the broader network. The recovered funds are now subject to governance decisions.

ARB is trading at $0.124 at the time of publication, down 2.5% over the past 24 hours.