The Incident/Update
Imagine waking up to find nearly three hundred million dollars gone from a project you trusted. That is exactly what happened to KelpDAO users on April 18, 2026, when an attacker drained the protocol through a flaw in its LayerZero bridge adapter. The thief created one hundred sixteen thousand five hundred fake rsETH tokens and used them to borrow around one hundred ninety million dollars from Aave V3. The story does not end there. On April 20 and 21, the Arbitrum Security Council stepped in with an emergency freeze. They moved thirty thousand seven hundred sixty-six ETH worth roughly seventy-one million dollars into a frozen wallet. This action happened without any private key at all — they simply used a temporary function that copied the look of a normal transaction. Later, on May 8, the Arbitrum DAO voted to send those same funds to the DeFi United recovery fund. That fund already held sixty-nine thousand five hundred thirty-four ETH from Aave, Lido, EtherFi, Mantle, and Ethena to help cover the full loss. A U.S. court restraining notice filed by lawyer Gabriel Shapiro then blocked the transfer. A divestiture hearing now stands in the way. The recovery goal remains redistribution by the end of July 2026, but the legal roadblock has put everything on hold.
Technical Post-Mortem
The exploit started when the attacker took control of two LayerZero verification servers. This let them mint the fake rsETH tokens without any real backing. They then placed nearly ninety thousand of those tokens into Aave V3 as collateral and pulled out one hundred ninety million dollars in other assets. The Arbitrum Security Council responded by upgrading the L1 Ethereum contract that controls Arbitrum’s Inbox. They froze the thirty thousand seven hundred sixty-six ETH and moved it to a safe wallet. Think of it like a bank freezing a thief’s account without needing the thief’s password. The council used a short-term function that looked exactly like any normal transaction. No private keys were involved at any point. This kept the assets from leaving the network while the community figured out next steps.
Governance Impact
This case shines a bright light on what happens when a DAO tries to do the right thing but runs straight into the traditional legal system. The Arbitrum DAO voted clearly to move the frozen ETH to the DeFi United fund. That vote showed strong community support for returning money to victims. Yet a single court order from a U.S. judge stopped everything. The restraining notice now requires a full divestiture hearing before any transfer can happen. This has never been tested before at this scale.
Decentralized governance relies on community votes and on-chain actions. Traditional courts rely on lawyers, judges, and paper filings. When the two worlds meet, the result is confusion and delay. The Arbitrum Security Council acted fast to protect assets, but the DAO vote now sits in legal limbo. Many community members worry this sets a bad example. If courts can block DAO decisions at any time, then true decentralization becomes harder to achieve. The case could force future DAOs to add extra legal steps before they act on stolen funds. It also shows that even the best on-chain tools cannot fully escape off-chain rules.
What This Means For You: If you hold tokens in any DAO, you may soon see new rules added to votes. These rules could require legal review before funds move. Your voice in governance still matters, but it may now share space with lawyers and judges. The delay hurts everyone waiting for their share of the recovery fund. Stay informed about court updates because they can change timelines overnight.
TVL Shifts
The KelpDAO exploit and the following freeze caused clear drops in total value locked across related protocols. Users pulled assets from Aave V3 and LayerZero-connected projects while waiting for clarity. The DeFi United fund collected sixty-nine thousand five hundred thirty-four ETH from major players including Aave, Lido, EtherFi, Mantle, and Ethena. This showed strong industry support for recovery, but the court block slowed any redistribution. Overall DeFi TVL in the Arbitrum ecosystem felt the pressure as people moved funds to safer spots during the uncertainty. The frozen thirty thousand seven hundred sixty-six ETH remain untouched in the intermediary wallet while the hearing date gets set.
Long-Term Prognosis
This clash between Arbitrum DAO and the courts will likely shape how decentralized projects handle future exploits. DAOs may start building legal teams or adding clauses that respect court orders from the start. The precedent could make recovery faster in some cases because everyone knows the rules ahead of time. At the same time, it may slow emergency actions since groups will pause to check legal risks first. The goal of returning money to victims by July 2026 now depends on the outcome of the divestiture hearing. If the court allows the transfer, the DeFi United fund can finish its work. If not, the assets stay frozen longer and trust in on-chain governance takes another hit. Either way, the story proves that decentralized systems must learn to work with traditional law instead of ignoring it.
Disclaimer: This article is for informational purposes only and does not constitute financial, legal, or investment advice. Cryptocurrency markets carry high risk and past performance does not guarantee future results. Always do your own research and consult qualified professionals before making any decisions.
116k fake rsETH tokens and nobody at KelpDAO thought to cap the mint function. LayerZero bridges keep getting rekt the same way every time
116k fake rsETH tokens minted through 2 compromised layerzero servers and nobody flagged it until 190M was already gone from aave. bridge security is still the #1 problem in defi
116k fake rsETH from two compromised LayerZero DVNs and the mint function had no cap. thats a $190M design flaw
Pernille V. the crazy part is the DAO voted to fix it and a single lawyer filed a piece of paper and froze everything. governance tokens are theater
snapshot_overrule_ thousands of token holders voted and one guy with a law degree overrode them. tells you exactly what governance tokens are worth
dao_court_ the DAO voted and one judge said no. people still think governance tokens give them control over protocol decisions lol
bridge_rekt_ two DVNs compromised and the mint function had no supply cap. 190M borrowed from aave before anyone noticed. layers of failure
layerzero_fault two DVNs and no supply cap on the mint function. 116k fake rsETH minted before anyone noticed. bridge security is still stuck in 2022
Gabriel Shapiro has been going after DAOs for months now. Not surprised he filed the restraining notice honestly, the guy is consistent if nothing else
gabriel shapiro filing a restraining notice to block the recovery transfer is honestly wild. the DAO voted to fix it and one lawyer put everything on hold
^ the security council moving 30k ETH without a private key using a temporary inbox upgrade is actually a fascinating technical detail. scary precedent though
gabriel shapiro blocking the transfer after the DAO already voted is some vigilante lawyering. one guy overriding thousands of token holders
shapiro blocking a DAO vote with a piece of paper is the logical endgame of governance theater. token holders voted, one lawyer overruled thousands of people
inbox_frozen_ one lawyer overriding thousands of token holders is the entire governance token thesis in a nutshell. they are worth zero when the legal system knocks
snapshot_goblin one lawyer overriding thousands of token holders is the entire governance token thesis collapsing in real time
snapshot goblin is right. governance tokens are cosplay ownership. the second a lawyer shows up your vote means nothing
the DAO voted to move the funds and one judge just said no. tells you everything about how much governance tokens are actually worth when push comes to shove
snapshot_voter DAO voted to recover funds and one judge said no. tells you exactly how much governance tokens are worth in court
the security council froze 30k ETH without a private key using a temporary function. that part is actually impressive from a technical standpoint, regardless of the legal mess
Klaudia F. security council moving 30k ETH without a private key via temporary upgrade is clever but terrifying. that same mechanism in the wrong hands
116k fake rsETH from 2 compromised LayerZero servers. bridge adapters are the weakest link in every DeFi stack. how many more before people learn
30k ETH moved without a private key via temporary inbox upgrade. technically clever and absolutely terrifying if that mechanism gets abused
30k ETH moved without a private key via temporary inbox upgrade. technically brilliant and absolutely terrifying. that same mechanism in attacker hands would be catastrophic
two compromised LayerZero DVNs and the mint function had no supply cap. 116k fake rsETH before anyone noticed. bridge security is still in 2022
116k fake rsETH minted through 2 compromised DVNs and the mint function had no cap. how is that not the headline of every crypto security article that week