hack or exploit

Arbitrum’s Security Council Can Move a Wallet’s Funds Without Its Key, Binance Freeze Shows

28Importance
closedStatus
5News media
5Pieces
Published
Updated
Since then
4 new reports
Also mentions
ETH

Arbitrum’s Security Council moved assets from an address linked to the Binance exploit and a Nov. 2 walkthrough said it did so without needing the address’s private key. Separate coverage put the value moved at about $30 million and noted the council had done the same in April.

Key claims & sources

✓
On Oct. 30, Arbitrum’s Security Council moved 74,559,805.2 ARB and about 8,426 ETH from an address its notice tied to the Binance exploit.
✓
On Nov. 2, Zealynx posted a walkthrough on the Ethereum Magicians forum showing that the council did not need the private key for the address it emptied.
✓
A Coindesk report said Arbitrum’s council moved about $30 million of Binance hack funds without the hacker’s key.

What it means

Arbitrum’s Security Council is a governance body that can act on protocol-controlled assets, and this case shows how that authority can be used around an address tied to a major exchange hack. The Binance exploit is the reference point here, and Arbitrum’s notice connected the emptied address to that incident. Zealynx’s Nov. 2 walkthrough on Ethereum Magicians adds a practical detail: the council was able to act without the private key for the address.

For users and builders in Arbitrum, this is a reminder that onchain control can be concentrated in a small emergency group rather than only in ordinary wallet ownership. That matters because it means a council can move funds linked to a security event even when the holder of the private key is not available or is not the actor being addressed. It also shows how protocol rescue or containment tools can sit uneasily beside the usual expectation that a private key is the only way to move a wallet. (per coindesk.com)

Still open is what exact controls, approvals, or onchain mechanisms let the council move the address’s assets in October and April. The publicly stated link to the Binance exploit explains why the action was taken, but it does not show whether other addresses, assets, or recovery steps are still involved. The next item that would settle more of the picture is a fuller technical account of how the council reached and moved the funds.

Market reaction i

ArbitrumARB it is the asset of the company or protocol in the event
first headline
+0.2% 2 h before
-1.3% 4 h after
$0.1558price at publication
11data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

+11 h 56 m
Nov 3 09:30
+13 h 4 m
Nov 3 10:37
Crypto Economy context
Its angle: extraordinary, participants, transactions; with quotes
+13 h 15 m
Nov 3 10:48
crypto.news echo
No new facts: cryptocurrency, destination, returning

Thefts of a similar size

WhenWhat happenedFigure
4.9 years ago Grim Finance · Reentrancy incident $30M
4.9 years ago Snowdog DAO · Rug pull incident $30M
5.0 years ago Curve Finance · Governance attack incident $30M
6.2 years ago Empire Market · Scam incident $30M
8.4 years ago Bithumb · Wallet stolen incident $30M

4282 incidents stored · 184 were as large as this one or larger ($30M)