{"id":71493,"date":"2026-04-22T07:23:25","date_gmt":"2026-04-22T07:23:25","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/kelpdao-exploit-reveals-high-stakes-shift-in-cross-chain-cybercrime\/"},"modified":"2026-04-22T07:23:25","modified_gmt":"2026-04-22T07:23:25","slug":"kelpdao-exploit-reveals-high-stakes-shift-in-cross-chain-cybercrime","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/kelpdao-exploit-reveals-high-stakes-shift-in-cross-chain-cybercrime\/","title":{"rendered":"KelpDAO Exploit Reveals High-Stakes Shift in Cross-Chain Cybercrime"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<p><strong>Key Takeaways:<\/strong><\/p>\n<ul>\n<li>The Arbitrum Security Council and SEAL 911 froze 30,766 <span>ETH<\/span> on April 18 to mitigate the Kelp <span>DAO<\/span> heist.<\/li>\n<li>Certik analyst Wenzhao Dong warns that bridge thefts now create systemic bad debt for platforms like Aave.<\/li>\n<li>Kelp <span>DAO<\/span> aims to restore the rsETH peg and recover the remaining $220 million in missing digital assets.<\/li>\n<\/ul>\n<h2>Security vs. Sovereignty<\/h2>\n<p>The Arbitrum Security Council\u2019s (ASC) swift intervention to freeze 30,766 <span>ETH<\/span> has reignited one of the most fundamental debates in <span>blockchain<\/span>: the tension between immutable decentralization and pragmatic governance.<\/p>\n<p>While the recovery of $71 million in <span>ETH<\/span> is a clear victory for victims, the method has split the community into two distinct camps. On one hand, purists argue that the ASC\u2019s ability to unilaterally freeze assets is a \u201cslippery slope\u201d toward the centralized financial systems <span>cryptocurrency<\/span> was designed to replace. They contend that if a council can censor a hacker today, it could be coerced into censoring a political dissident or a legal business tomorrow. To this group, \u201chuman-in-the-loop\u201d intervention is a systemic vulnerability that undermines the core promise of trustlessness.<\/p>\n<p>On the other hand, pragmatists view absolute decentralization as an aspirational end-state rather than a day-one requirement. They contend that for <span>decentralized finance<\/span> ( <span>DeFi<\/span>) to achieve mainstream adoption, it must have \u201ccircuit breakers\u201d to mitigate catastrophic losses. From this perspective, the ASC is a necessary safeguard\u2014a \u201cdigital fire department\u201d\u2014providing the accountability required to protect users from sophisticated state-sponsored actors like the Lazarus Group.<\/p>\n<p>As <a href=\"https:\/\/news.bitcoin.com\/arbitrum-security-council-freezes-kelpdao-exploiter-eth\/\">reported<\/a> by <span>Bitcoin.com<\/span> News and other media outlets, the ASC acted on input from law enforcement regarding the exploiter\u2019s identity. The council stated it weighed its commitment to the security and integrity of the Arbitrum community while ensuring no impact on Arbitrum users or applications.<\/p>\n<p>While the freeze provides temporary relief, one expert warned that the heist represents a new, more dangerous phase of <span>DeFi<\/span> crime where bridge vulnerabilities are systematically used to infect lending markets.<\/p>\n<p>Providing a post-mortem on the attacker\u2019s strategy, Wenzhao Dong, a <span>blockchain<\/span> analyst at Certik, pointed out that the North Korea-backed Lazarus Group displayed a sophisticated understanding of market <span>liquidity<\/span>. Dong noted that, unlike the recent Hyperbridge <a href=\"https:\/\/news.bitcoin.com\/polkadot-price-dips-6-following-1-billion-token-minting-breach-on-ethereum\/\">incident<\/a> \u2014 where attackers minted 1 billion Polkadot but only managed to convert about $240,000 before the price crashed \u2014 the Kelp <span>DAO<\/span> attackers chose a more efficient \u201ccash-out\u201d route.<\/p>\n<p>\u201cThe Kelp <span>DAO<\/span> exploit shows a clear risk pattern in modern <span>DeFi<\/span>,\u201d Dong said. \u201cA bridge vulnerability doesn\u2019t stay isolated; it turns into a problem for lending markets. By using falsely minted rsETH as collateral on Aave to borrow WETH, the attacker changed a bridge theft into Aave bad debt.\u201d<\/p>\n<p>Dong noted that the attackers deliberately avoided spot markets, where massive sell orders would have triggered slippage and early detection. Instead, by using Aave as a middleman, they offloaded the risk onto the lending protocol.<\/p>\n<p>\u201c <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-defi-decentralized-finance\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">DeFi<\/a> security is interconnected,\u201d Dong added. \u201cProtocols cannot focus solely on their own contracts; they must consider the risks posed by every dependency in their system and implement defensive measures accordingly.\u201d<\/p>\n<p>In an <a href=\"https:\/\/x.com\/KelpDAO\/status\/2046481564616523976\" target=\"_blank\" rel=\"noopener noreferrer\">update<\/a> shared hours after the ASC announced the freeze, Kelp <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-a-dao\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">DAO<\/a> expressed gratitude for the \u201cdecisive action\u201d taken by the council. It credited SEAL 911\u2019s \u201ccoordination and information structuring\u201d as the key factor that allowed stakeholders to act before the hackers could move the remaining $71 million in <a href=\"https:\/\/branch.wallet.bitcoin.com\/news-contextual-eth\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">ETH<\/a> off the Arbitrum network.<\/p>\n<p>Despite the successful freeze, approximately $220 million remains missing. Kelp <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-a-dao\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">DAO<\/a> confirmed its primary focus is now working with Aave and other partners to address the \u201cbad debt\u201d created by the exploit. The organization stated it will also pursue all available avenues to support rsETH holders and restore the protocol\u2019s peg.<\/p>\n<div class=\"not-prose my-3 lg:my-4\">\n<div class=\"flex flex-col overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] md:hidden\">\n<div class=\"relative aspect-video w-full overflow-hidden rounded-[15px]\"><\/p>\n<h3 class=\"absolute inset-x-0 bottom-0 m-0 p-3 text-xl font-bold capitalize leading-[1.17] tracking-[-0.4px] !text-white\">KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin<\/h3>\n<\/div>\n<div class=\"flex flex-col gap-2.5 px-1 pt-2.5 pb-1\">\n<p class=\"m-0 line-clamp-2 text-xs leading-[1.3] !text-[#67656E]\">Hours after the Arbitrum Security Council froze 30,766 ether tied to the KelpDAO exploit, the attacker moved all 75,701 ETH,\u2026<\/p>\n<p><a class=\"flex h-[38px] w-full items-center justify-center rounded-pill bg-[#4169E1] text-sm font-medium text-white no-underline\" href=\"https:\/\/news.bitcoin.com\/kelpdao-exploiter-75701-eth-mainnet-bitcoin\/\">Read Now<\/a><\/div>\n<\/div>\n<div class=\"hidden overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] md:flex md:flex-row md:gap-3 lg:hidden\">\n<div class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\"><img alt=\"KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img src=\"https:\/\/news.bitcoin.com\/images\/uploads\/bitcoin_news_newlogo.svg\" alt=\"Bitcoin.com News\" class=\"size-7\" loading=\"lazy\"\/><\/div>\n<\/div>\n<div class=\"flex min-w-0 flex-1 flex-col justify-between gap-2\">\n<h3 class=\"m-0 line-clamp-3 text-xl font-bold capitalize leading-[1.17] tracking-[-0.4px] !text-[#1C1C1C]\">KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin<\/h3>\n<p class=\"m-0 line-clamp-2 text-sm leading-[1.3] !text-[#67656E]\">Hours after the Arbitrum Security Council froze 30,766 ether tied to the KelpDAO exploit, the attacker moved all 75,701 ETH,\u2026<\/p>\n<p><a class=\"flex h-[38px] w-full items-center justify-center rounded-pill bg-[#4169E1] text-sm font-medium text-white no-underline\" href=\"https:\/\/news.bitcoin.com\/kelpdao-exploiter-75701-eth-mainnet-bitcoin\/\">Read Now<\/a><\/div>\n<\/div>\n<div class=\"hidden overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] lg:flex lg:flex-row lg:gap-4\">\n<div class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\"><img alt=\"KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F04%2Fanonymous-hacker-with-black-leather-hoodie-in-shadow-under-spaceship-inside-background-150x150.jpg&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img src=\"https:\/\/news.bitcoin.com\/images\/uploads\/bitcoin_news_newlogo.svg\" alt=\"Bitcoin.com News\" class=\"size-7\" loading=\"lazy\"\/><\/div>\n<\/div>\n<div class=\"flex min-w-0 flex-1 flex-col justify-center gap-2\">\n<div class=\"flex items-start gap-3\">\n<h3 class=\"m-0 min-w-0 flex-1 line-clamp-2 text-2xl font-bold capitalize leading-[1.17] tracking-[-0.48px] !text-[#1C1C1C]\">KelpDAO Exploiter Moves 75,701 ETH to Mainnet, Begins Routing $175M to Bitcoin<\/h3>\n<p><a class=\"flex h-12 w-[180px] shrink-0 items-center justify-center rounded-pill bg-[#4169E1] text-sm font-medium text-white no-underline\" href=\"https:\/\/news.bitcoin.com\/kelpdao-exploiter-75701-eth-mainnet-bitcoin\/\">Read Now<\/a><\/div>\n<p class=\"m-0 line-clamp-2 text-base leading-[1.3] !text-[#67656E]\">Hours after the Arbitrum Security Council froze 30,766 ether tied to the KelpDAO exploit, the attacker moved all 75,701 ETH,\u2026<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/certik-analyst-kelpdao-exploit-reveals-high-stakes-shift-in-cross-chain-cybercrime\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways: The Arbitrum Security Council and SEAL 911 froze 30,766 ETH on April 18 to mitigate the Kelp DAO heist. Certik analyst Wenzhao Dong warns that bridge thefts now create systemic bad debt for platforms like Aave. Kelp DAO aims to restore the rsETH peg and recover [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":71494,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71493"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=71493"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/71493\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/71494"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=71493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=71493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=71493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}