Skip to content
$BTC$76,600−1.8%$ETH$2,246−0.9%$SOL$91.63−2.5%$XRP$1.25−0.2%$TON$1.780.0%MCap$2.58T+0.1%BTC.D59.4%Fear&Greed37 FearGas0.07 gwei·3.1 sat/vBNews mood13% bullish
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Security & Hacks · 2 min read

Arbitrum Council Freezes Exploit Funds by Forcing Address Transactions Without Keys

A temporary Inbox upgrade let Arbitrum's Security Council seize $ETH and $ARB from an attacker wallet by submitting unsigned type-0x65 transactions.

Editorial oversight: Julian Mercer, Chief Editor
Neutral
$ETH $2,246 −0.9% $ARB $0.1552 −5.3%

At a glance

What happened
Arbitrum's Security Council froze 8,425 ETH and 74,559,805.2 ARB tied to the Binance hack on Oct. 30 by deploying a temporary L1 contract upgrade that forced unsigned L2 transfers.
Why it matters
The action demonstrates how L2 administrative bridge controls can execute state transitions directly from an address without possessing its private key.
Who is affected
The Binance exploiter address, Arbitrum One ecosystem protocols, and ArbitrumDAO governance participants.
What's next
An ArbitrumDAO governance vote coordinated with relevant stakeholders to decide the final disposition of the seized funds.
Primary source
ethereum-magicians.org: How Arbitrum's freezes send transactions from an address without its key

Key points

  • Arbitrum's Security Council froze 8,425 ETH and 74,559,805.2 ARB tied to the Binance exploit on Oct. 30 12.
  • The emergency action utilized a temporary L1 Inbox upgrade to generate unsigned type-0x65 transactions directly from the target wallet 12.
  • Frozen funds sit in a DAO-controlled address and require an ArbitrumDAO governance vote to move 2.

The Arbitrum Security Council executed an emergency intervention on Oct. 30 to freeze 8,425 $ETH and 74,559,805.2 $ARB tied to the Binance security breach 12. The council transferred the assets to a governance-controlled escrow address, 0x0000000000000000000000000000000000000DA0, preventing further movement without an ArbitrumDAO vote 2. At the time of writing, $ETH traded at $2,254 and $ARB was down 4.6% over 24 hours at $0.1566.

According to an analysis on Ethereum Magicians, the intervention functioned by instructing Arbitrum One to originate transfers directly from the target wallet without the owner's private key 1. The council’s 9-of-12 multi-signature Safe initiated the operation via the L1 UpgradeExecutor on Ethereum, pointing the Inbox proxy to a custom implementation containing a function called sendUnsignedTransactionOverride 12. This code circumvented typical sender aliasing, transmitting cross-chain messages that materialized on Arbitrum One as type-0x65 unsigned transactions (ArbitrumUnsignedTx) with blank signature parameters 1. The transactions consumed the attacker's next available nonces, rendering any pre-signed transactions for those slots invalid, and superseded an active EIP-7702 delegation on the address 1.

Governance Authority and Chain Architectures

The operation marked the second time this year the council applied the override mechanism, following an April 21 freeze of 30,765 ETH associated with the KelpDAO exploiter 1. Because the Inbox proxy implementation was restored within the single atomic Ethereum transaction, standard EIP-1967 implementation slot queries did not register a persistent proxy modification 1. Instead, the maneuvers were observable via Upgraded and UpgradeExecuted events 1.

While the Security Council deployed powers granted under ArbitrumDAO governance parameters, technical analysts highlighted structural implications for protocols building on Arbitrum Orbit stacks 1. On Arbitrum One, upgrade access is split between the emergency multi-sig and the DAO's timelocked governance; however, custom Orbit chains rely on their respective chain owners 1. Decentralized applications and off-chain indexers that infer asset ownership solely from address-signed events face distinct accounting assumptions on networks with administrative upgrade overrides 1. Any eventual release or reallocation of the frozen Binance exploit capital now awaits a formal Binance-related ArbitrumDAO governance proposal 2.

Questions this story raises

Can private keys prevent Arbitrum Security Council overrides?
No. The Security Council's emergency Inbox upgrade mechanism generates unsigned type-0x65 transactions on Arbitrum One directly from the target address, bypassing private key signatures and EIP-7702 delegations [1].
How can the frozen funds be released?
The frozen ETH and ARB tokens are locked in address 0x...0DA0 and can only be transferred following a formal ArbitrumDAO governance vote [2].

Sources

  1. [1] How Arbitrum's freezes send transactions from an address without its key — ethereum-magicians.org, November 2, 2026
  2. [2] Security Council Emergency Action – 30/10/2026 — forum.arbitrum.foundation, October 30, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote
Share X Telegram Bluesky Markdown

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.