Arbitrum Freezes $70 Million After Hack by Lazarus Group

By Patricia Miller

Apr 25, 2026

2 min read

Arbitrum has frozen $70 million due to a hack from North Korea's Lazarus Group, reflecting serious risks in crypto security.

#What Happened with Arbitrum’s Security Measures?

Arbitrum's security council made a significant move by freezing $70 million linked to an exploit traced back to North Korea’s Lazarus Group. This incident affected the KelpDAO bridge, which operates on LayerZero technology, leading to an initial loss that ranged from $292 million to $300 million. As a result of these developments, the market is now anticipating another major crypto hack, with estimates suggesting a likelihood of more than $100 million by year-end, sitting at 100% certainty.

#How Are Traders Reacting to this Incident?

Traders monitoring the cryptocurrency space viewed Arbitrum's swift action as an indication that large-scale hacking incidents are both frequent and alarming. The governance measures taken to secure the frozen funds were unprecedented within the industry. The certainty in the prediction market reflects traders’ expectations, with no movement in prices suggesting a firmly established belief in the occurrence of further substantial incidents in the near future.

#What Makes This Case Unique?

What sets this incident apart is Arbitrum's proactive use of emergency multisig powers to upgrade a bridge contract during the exploit. This is a first for any Layer-2 network and allowed the team to protect a significant portion of the stolen funds before they could be transferred elsewhere.

#What Should Investors Watch For?

At present, the market shows no active trades, maintaining a valuation that reflects full anticipation of high-stakes DeFi exploits. Investing at a fixed rate of 100 cents provides no immediate returns due to the already established price ceiling. However, an important question arises: Will other governance entities adopt Arbitrum's method of executing contract upgrades during an exploit? If this strategy proves effective, it could shift the dynamics for potential attackers targeting cross-chain bridges.
Keep an eye out for updates from Chainalysis and SlowMist, as any further confirmations of exploits or similar governance actions may influence market perceptions and pricing strategies.

Important Notice And Disclaimer

This article does not provide any financial advice and is not a recommendation to deal in any securities or product. Investments may fall in value and an investor may lose some or all of their investment. Past performance is not an indicator of future performance.