Image Credit: arbitrum.io
- Arbitrum’s Security Council used emergency powers to secure exploit-associated crypto assets.
- The intervention successfully moved the funds out of the exploit-linked address.
- Releasing these secured assets now requires an ArbitrumDAO governance vote.
Arbitrum’s Security Council used emergency powers on Oct. 30 to secure 8,425 Ether (ETH) and approximately 74.56 million ARB associated with the Binance exploit.
The intervention moved the assets out of the exploit-linked address. Their release now requires an ArbitrumDAO governance vote, while Arbitrum said other users’ funds and applications were unaffected.
Temporary Upgrade Moved Funds From the Exploit-Linked Address
The emergency transaction was executed at 00:08 UTC. It temporarily changed Arbitrum’s inbox contract on Ethereum, which handles messages sent from Ethereum for execution on Arbitrum One.
The new code allowed two transactions to act as though they had been sent by the address holding the exploit-linked assets. Those transactions instructed the transfer of the ETH and ARB to a separate holding address.
Arbitrum contributors prepared the instructions, and the Security Council reviewed them before signing and executing the intervention. The Ethereum transaction was recorded as successful in block 26,301,886.
For each transfer message, the council installed the temporary code and then restored the original version. Both cycles were bundled into one Ethereum transaction; the resulting asset transfers took place on Arbitrum One. Arbitrum published its forum account at 01:22 UTC, about 74 minutes after the emergency transaction.
Nine Council Members Can Authorize Immediate Emergency Changes
The Security Council has 12 members, and emergency action requires approval from at least nine. That authority allows the council to carry out software upgrades and other necessary measures without waiting through the ordinary governance process.
Its emergency powers are delegated by ArbitrumDAO and the Arbitrum Foundation. They are reserved for genuine security emergencies, including vulnerabilities that could seriously compromise a governed chain’s integrity, confidentiality, or availability.
Routine council upgrades also require nine approvals, but they pass through a waiting period before taking effect.
That delay gives users an opportunity to withdraw before a change is implemented.
Council members are elected through the DAO in two groups of six. Elections replace one group at a time, while the other group continues serving.
Emergency interventions also require a subsequent transparency report explaining what happened and why the action was justified. The DAO can amend or remove the council’s emergency powers through a constitutional governance proposal.
DAO Voters Must Approve Movement of the Secured Assets
The ETH and ARB were transferred to the Arbitrum One address 0x0000000000000000000000000000000000000DA0. The completed intervention secured the assets there, rather than returning them to Binance. Arbitrum stated:
“[…] The funds can only be moved by an ArbitrumDAO Governance vote, which will be coordinated with relevant parties.”
ARB holders participate in governance using delegated voting power. They can vote themselves after delegating to their own address or assign that power to another representative, with delegation required before the voting period begins.
Formal proposals must receive more votes in favor than against and meet the applicable participation threshold. Arbitrum’s standard process also includes waiting periods between approval and implementation of the actions that voters authorize.
