Certik Analyst: KelpDAO Exploit Reveals Excessive-Stakes Shift in Cross-Chain Cybercrime

[ad_1] Key Takeaways:

The Arbitrum Safety Council and SEAL 911 froze 30,766 ETH on April 18 to mitigate the Kelp DAO heist. Certik analyst Wenzhao Dong warns that bridge thefts now create systemic dangerous debt for platforms like Aave. Kelp DAO goals to revive the rsETH peg and recuperate the remaining $220 million in lacking digital belongings. Safety vs. Sovereignty The Arbitrum Safety Council’s (ASC) swift intervention to freeze 30,766 ETH has reignited one of the vital elementary debates in blockchain : the strain between immutable decentralization and pragmatic governance.

Whereas the restoration of $71 million in ETH is a transparent victory for victims, the strategy has break up the group into two distinct camps. On one hand, purists argue that the ASC’s capability to unilaterally freeze belongings is a “slippery slope” towards the centralized monetary techniques cryptocurrency was designed to exchange. They contend that if a council can censor a hacker at this time, it could possibly be coerced into censoring a political dissident or a authorized enterprise tomorrow. To this group, “human-in-the-loop” intervention is a systemic vulnerability that undermines the core promise of trustlessness.

Alternatively, pragmatists view absolute decentralization as an aspirational end-state moderately than a day-one requirement. They contend that for decentralized finance ( DeFi ) to realize mainstream adoption, it will need to have “circuit breakers” to mitigate catastrophic losses. From this angle, the ASC is a obligatory safeguard—a “digital hearth division”—offering the accountability required to guard customers from refined state-sponsored actors just like the Lazarus Group.

As reported by Bitcoin.com Information and different media shops, the ASC acted on enter from regulation enforcement relating to the exploiter’s identification. The council said it weighed its dedication to the safety and integrity of the Arbitrum group whereas guaranteeing no impression on Arbitrum customers or purposes.

Whereas the freeze supplies short-term aid, one skilled warned that the heist represents a brand new, extra harmful part of DeFi crime the place bridge vulnerabilities are systematically used to contaminate lending markets.

Offering a autopsy on the attacker’s technique, Wenzhao Dong, a blockchain analyst at Certik, identified that the North Korea-backed Lazarus Group displayed a classy understanding of market liquidity . Dong famous that, not like the current Hyperbridge incident — the place attackers minted 1 billion Polkadot however solely managed to transform about $240,000 earlier than the value crashed — the Kelp DAO attackers selected a extra environment friendly “cash-out” route.

“The Kelp DAO exploit reveals a transparent danger sample in fashionable DeFi ,” Dong mentioned. “A bridge vulnerability doesn’t keep remoted; it turns into an issue for lending markets. Through the use of falsely minted rsETH as collateral on Aave to borrow WETH, the attacker modified a bridge theft into Aave dangerous debt.”

Dong famous that the attackers intentionally prevented spot markets, the place large promote orders would have triggered slippage and early detection. As an alternative, through the use of Aave as a intermediary, they offloaded the chance onto the lending protocol.

“ DeFi safety is interconnected,” Dong added. “Protocols can't focus solely on their very own contracts; they have to contemplate the dangers posed by each dependency of their system and implement defensive measures accordingly.”

In an replace shared hours after the ASC introduced the freeze, Kelp DAO expressed gratitude for the “decisive motion” taken by the council. It credited SEAL 911’s “coordination and data structuring” as the important thing issue that allowed stakeholders to behave earlier than the hackers might transfer the remaining $71 million in ETH off the Arbitrum community.

Regardless of the profitable freeze, roughly $220 million stays lacking. Kelp DAO confirmed its main focus is now working with Aave and different companions to deal with the “dangerous debt” created by the exploit. The group said it is going to additionally pursue all out there avenues to help rsETH holders and restore the protocol’s peg.

<img alt="KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin" loading="lazy" decoding="async" data-nimg="fill" class="object-cover" style="position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent" sizes="(max-width: 768px) calc(100vw - 18px)" srcset="/_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=32&q=75 32w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=48&q=75 48w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=64&q=75 64w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=128&q=75 128w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=256&q=75 256w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=384&q=75 384w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=640&q=75 640w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=828&q=75 828w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=1080&q=75 1080w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=1200&q=75 1200w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=1920&q=75 1920w" src="https://news.bitcoin.com/_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-760x428.jpg&w=1920&q=75"/> KelpDAO Exploiter Strikes 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin Hours after the Arbitrum Safety Council froze 30,766 ether tied to the KelpDAO exploit, the attacker moved all 75,701 ETH,…

Learn Now <img alt="KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin" loading="lazy" decoding="async" data-nimg="fill" class="object-cover" style="position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent" sizes="150px" srcset="/_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=32&q=75 32w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=48&q=75 48w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=64&q=75 64w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=128&q=75 128w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=256&q=75 256w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=384&q=75 384w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=640&q=75 640w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=828&q=75 828w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1080&q=75 1080w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1200&q=75 1200w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1920&q=75 1920w" src="https://news.bitcoin.com/_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1920&q=75"/> KelpDAO Exploiter Strikes 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin Hours after the Arbitrum Safety Council froze 30,766 ether tied to the KelpDAO exploit, the attacker moved all 75,701 ETH,…

Learn Now <img alt="KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin" loading="lazy" decoding="async" data-nimg="fill" class="object-cover" style="position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent" sizes="150px" srcset="/_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=32&q=75 32w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=48&q=75 48w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=64&q=75 64w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=128&q=75 128w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=256&q=75 256w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=384&q=75 384w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=640&q=75 640w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=828&q=75 828w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1080&q=75 1080w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1200&q=75 1200w, /_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1920&q=75 1920w" src="https://news.bitcoin.com/_next/image/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&w=1920&q=75"/> KelpDAO Exploiter Strikes 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin Learn Now Hours after the Arbitrum Safety Council froze 30,766 ether tied to the KelpDAO exploit, the attacker moved all 75,701 ETH,…