Security

Arbitrum

Million

Ethereum

Arbitrum’s Security Council has moved 74 million ARB and 8,425 ETH from an address linked to the October 29 Binance hack, without the wallet holder’s signature.
Arbitrum’s Security Council used emergency upgrade powers to move the funds. The action requires approval from nine of its twelve members, but it also highlights how users’ control over their funds can be overridden.
<h2 id="arbitrum-moves-30-million-linked-to-binance-hack">Arbitrum Moves $30 Million Linked To Binance Hack</h2>
Arbitrum, a Layer-2 blockchain running on <a rel="noopener noreferrer nofollow" href="https://coinstats.app/coins/ethereum/">Ethereum</a>, has moved 8,425 <a rel="noopener noreferrer nofollow" href="https://coinstats.app/coins/ethereum/">ETH</a> and 74 million ARB, worth around $30 million, linked to the <a rel="noopener noreferrer nofollow" href="https://www.binance.com/register?ref=TT5IWFGB">Binance</a> exploit. The funds were moved without the hacker’s knowledge. Arbitrum’s Security Council consists of twelve members elected by ARB token holders and has emergency powers to upgrade network contracts. However, such an action requires approval from nine of its members.
The council exercised its emergency powers for only the second time on Friday, when its shared wallet, known as the Safe, sent an <a rel="noopener noreferrer nofollow" href="https://coinstats.app/coins/ethereum/">Ethereum</a> transaction that temporarily replaced the code of Arbitrum’s Inbox with a function called sendUnsignedTransactionOverride. This change allowed the Security Council to send transactions that Arbitrum assumed were from the exploiter’s address.
The council executed two transactions to move the ARB and ETH from the exploit-linked address to a holding address ending with 0DA0. The same transaction also restored the original Inbox code, according to a notice on Arbitrum’s governance forum.
“At 8:08 am HKT, 30th October 2026, the Security Council executed an emergency action to freeze 8,425 ETH and 74,559,805.2 ARB held on Arbitrum One by an address identified with today’s <a rel="noopener noreferrer nofollow" href="https://www.binance.com/register?ref=TT5IWFGB">Binance</a> exploit. Funds associated with the Binance exploit are frozen on Arbitrum One. No other user’s funds or applications were affected.”
<h2 id="zealnyx-s-analysis">Zealnyx’s Analysis</h2>
Zealnyx, a blockchain security firm, analyzed how Arbitrum froze the funds without having access to the address keys. According to the analysis, the override implementation records the target address without an alias. The funds arrived on Arbitrum as type 0x65 transactions with a blank signature field, using the exploiter’s own transaction counter because the delegate’s code does not run. The analysis stated,
“The council used powers the DAO gave it and published both actions within an hour and a half.”
Arbitrum’s Security Council has used its emergency upgrade powers previously as well, moving 30,766 <a rel="noopener noreferrer nofollow" href="https://coinstats.app/coins/ethereum/">ETH</a> valued at around $71 million at the time from the KelpDAO hacker.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
This article was originally published as <a href="https://www.cryptobreaking.com/arbitrum-security-council-moves-30/?utm_source=rss&amp;utm_medium=syndication&amp;utm_campaign=article_footer" rel="noopener noreferrer nofollow">Arbitrum Security Council Moves $30 Million Tied To Binance Exploit</a> on <a href="https://www.cryptobreaking.com/?utm_source=rss&amp;utm_medium=syndication&amp;utm_campaign=article_footer" rel="noopener noreferrer nofollow">Crypto Breaking News</a> – your trusted source for crypto news, Bitcoin news, and blockchain updates.

Arbitrum Security Council Moves $30 Million Tied To Binance Exploit

Table of Contents

Crypto Breaking News

Other articles published on Nov 4, 2026

Join our free newsletter for daily crypto updates!