TL;DR
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
Arbitrum’s Security Council used emergency network-upgrade powers to move more than 8,425 ETH and 74 million ARB from an address linked to the Binance hack, without the address’s private-key signature. The roughly $30 million is now held in a separate address and can be moved only through an ArbitrumDAO governance vote; the process and any legal claims remain unresolved.
Arbitrum’s Security Council moved more than 8,425 ETH and 74 million ARB—worth about $30 million at current prices—from an address linked to the Binance hack, without a signature from the address’s owner. The assets are now in a holding address and, according to the council, can be moved only through an ArbitrumDAO governance vote.
The council carried out the transfer Friday using its emergency authority to upgrade Arbitrum’s contracts. The 12-member council requires approval from nine members to use those powers. According to a notice on Arbitrum’s governance forum, its shared wallet temporarily replaced the code of the network’s Inbox contract, which relays messages from Ethereum to Arbitrum. The replacement code enabled transactions that Arbitrum treated as coming from the exploiter’s address.
Two transactions moved the ETH and ARB to a holding address ending in 0DA0. The council’s notice said the original Inbox code was restored in the same transaction. It also stated that no other users’ funds or applications were affected. That is the council’s account of the operation; the supplied report does not describe an independent audit of that assurance.
Blockchain security firm Zealynx traced the transfers and said the funds arrived on Arbitrum about 10 minutes after the Ethereum transaction. The firm described the resulting transactions as having blank signature fields and using the exploiter address’s transaction counter. The assets remain under a governance process rather than being directly returned to a victim, and the report does not establish who will ultimately receive them.
Emergency Powers and User Control
The transfer shows that Arbitrum’s upgrade controls can, in an emergency, bypass the usual rule that a wallet’s private key must authorize a transaction. That capability may allow the network’s elected council to act on funds associated with an exploit, but it also means that control of the upgrade path can affect what addresses are able to spend.
Zealynx said the council used powers granted by the DAO and published both actions within an hour and a half. The firm also cautioned that the assumption that an address can move funds only when its key signs a transaction holds “up to whoever controls the upgrade path.” The case therefore raises a practical question for users: what limits, oversight and accountability apply when emergency powers are used to override ordinary wallet authorization?
The amount is small compared with the approximately $6.3 billion taken from Binance, according to the report, but it remains a substantial sum. The funds’ future also matters to people seeking recovery from major crypto exploits, since moving assets into a holding address does not by itself decide ownership or settle competing claims.
Products Worth Considering
Ledger Flex + Folio Crypto Hardware Wallet
Trezor Safe 5 Crypto Hardware Wallet with Color Touchscreen, Black Graphite
Ledger Nano Gen5 Crypto Wallet, Black
As an affiliate, we earn on qualifying purchases.
Earlier Recovery Faced Legal Delays
Arbitrum is a network built on Ethereum to make transactions cheaper and holds billions of dollars in user deposits. Under ordinary blockchain operation, a wallet’s private key signs a transaction authorizing funds to move. The council’s emergency procedure relied instead on its authority to change network contracts, allowing the transactions to be processed without the exploiter’s signature.
This was not the council’s first recovery using emergency powers. In April, it moved 30,766 ETH, then valued at about $71 million, from the KelpDAO exploiter after law enforcement identified the attacker, according to the report. The assets were also held pending a governance decision. Their release took weeks after families with unpaid terrorism judgments against North Korea sought to claim the funds; a Manhattan federal judge modified a restraining notice before the DAO could vote to send the ether to Aave.
The earlier case illustrates why recovery and distribution are separate steps. A council may be able to move assets, but deciding who is entitled to them can involve governance decisions and legal proceedings. The report does not say that the same claimants or legal issues apply to the Binance-linked funds.
“The assumption an address only moves when its key signs holds “up to whoever controls the upgrade path.””
— Zealynx
Ownership and Release Still Undecided
The transfer’s ultimate outcome is not yet clear. The report does not identify a timetable for an ArbitrumDAO vote, say who would receive the assets, or detail how the DAO will coordinate with relevant parties. It also does not establish whether any parties have filed legal claims over this specific holding address.
The council said other users’ funds and applications were unaffected, while Zealynx described the transaction behavior it observed. The supplied material does not include a separate technical review confirming the council’s full account of the code change and its effects. The reported value of about $30 million is based on current prices and can change with market movements; it is not the value of the assets at the time of transfer.
DAO Vote Will Determine the Funds
The next stated step is an ArbitrumDAO governance vote on whether and how to move the assets from the holding address. The council said coordination with relevant parties would accompany that process, but the report gives no vote date or proposed recipient. Until the DAO acts, the funds remain in the designated holding address under the council’s stated restrictions.
Readers should watch for a governance proposal, details about any claims or legal constraints, and a record of the eventual vote and transfer. The April recovery shows that a governance decision can be delayed by legal proceedings, though it does not establish that the same delay will occur here.
Key Questions
How much crypto did Arbitrum move?
The council moved more than 8,425 ETH and 74 million ARB. The report valued the assets at about $30 million at current prices when it was published.
Did the hacker authorize the transfers?
No. The report says the transfers occurred without a signature from the exploiter’s address. The council used emergency contract-upgrade powers to make the network process them.
Where are the funds now?
They were sent to a holding address ending in 0DA0. The council said the assets can be moved only through an ArbitrumDAO governance vote.
Has the DAO decided who gets the assets?
Not according to the supplied report. It gives no vote date or recipient, and says the funds’ next transfer must go through a governance vote.
Why has Arbitrum’s action drawn attention?
The council’s method bypassed the normal requirement for a wallet’s private key to sign a transfer. It highlights both the possible use of emergency powers to recover exploited assets and the control those powers give to the network’s upgrade authorities.
Source: coindesk.com
