Arbitrum's Emergency Intervention in Kelp DAO Hack Sparks Centralization Debate

The recent Kelp DAO hack has resulted in a significant loss for the DeFi ecosystem. On April 18, attackers exploited a vulnerability in Kelp DAO's LayerZero-powered cross-chain bridge, draining 116,500 rsETH valued at approximately $292 million.

Arbitrum's Security Council quickly stepped in to freeze roughly $71 million in stolen Ethereum tied to the hack. This move has mitigated the financial impact of the incident and highlighted the practical limits of pure decentralization when millions are at stake.

The Kelp DAO exploit involved spoofing a cross-chain message through LayerZero's EndpointV2 contract, tricking the bridge into releasing unbacked rsETH without a corresponding burn on the source chain. This was reportedly enabled by a weak 1-of-1 DVN (Data Verification Network) configuration on the route.

The incident has exposed ongoing risks in cross-chain bridges and liquid restaking protocols, with wrapped rsETH now stranded across more than 20 chains. The move to freeze funds has sparked debate over centralization vs decentralization, with some praising the swift action as responsible stewardship and others calling it a dangerous precedent.