Arbitrum Froze $70M From North Korea? Griff Green on the Decision + Miguel Morel on the Hack
Get the full intelligence
Search transcripts, export clips, track mentions, and explore all topics from “Arbitrum Froze $70M From North Korea? Griff Green on the Decision + Miguel Morel on the Hack” inside PodZeus.
This episode of Unchained dives into the massive KelpDAO hack, where North Korean hackers exploited Layer Zero's verifier network to mint 116,500 fake restaked ETH tokens, which were then used to borrow $270 million in WETH on Aave. The exploit triggered a bank run on Aave, creating massive bad debt and spreading contagion across DeFi. Miguel Morrell of Arkham explains how blockchain analytics tracked the stolen funds through ThorChain and laundered via mixers, pointing to the Lazarus Group as the likely culprit. The episode then shifts to the controversial response: Arbitrum’s Security Council, led by Griff Green, froze $71 million of the stolen funds using a forced inclusion transaction on Ethereum’s Layer 1, moving the money to a non-custodial address (0x0000DAO) for future DAO governance decisions. Green defends the move as a necessary, rare emergency action—similar to the 2016 DAO hard fork—emphasizing that blockchain technology is modifiable by social consensus, not immutable. He argues that accountability lies in market dynamics and public trust, not rigid code. The episode concludes with Green discussing the launch of the DAO Security Fund, a $1 million quadratic funding round to improve Ethereum security through coordinated, public-good investment in tools and expertise. The narrative underscores the tension between decentralization ideals and real-world security needs in DeFi. Key takeaways include: 1) DeFi’s composability can amplify systemic risk when one protocol is compromised; 2) Emergency governance tools like Arbitrum’s Security Council are viable but controversial mechanisms for fund recovery; 3) The success of such actions depends on rare technical and operational windows (e.g., hackers pausing to move funds); 4) Security is a public good that benefits from coordination, not isolated project-level efforts; 5) Quadratic funding offers a scalable, democratic way to allocate resources toward shared security infrastructure.
DeFi’s composability means a single exploit can trigger cascading failures across protocols, as seen when fake RSETH tokens caused a bank run on Aave.
Arbitrum’s Security Council froze $71M of stolen funds using a Layer 1 transaction, a rare but technically feasible emergency action enabled by forced inclusion.
The Lazarus Group’s laundering pattern—using ThorChain and splitting funds—strongly indicates North Korean involvement, according to Arkham’s analytics.
Security is a public good; coordinated investment through mechanisms like quadratic funding can reduce overall costs and improve ecosystem-wide resilience.
Blockchain governance is not immutable—social consensus and emergency powers are essential tools for protecting users, even if they challenge decentralization ideals.
Introduction to the KelpDAO Hack and DeFi Contagion
Laura Shin introduces the episode, setting the stage with a brief sponsor segment and outlining the massive scale of the KelpDAO hack, where North Korean hackers exploited Layer Zero to mint fake RSETH tokens and borrow $270M on Aave, triggering a bank run and systemic risk across DeFi.
Arkham’s Role in Tracking the Stolen Funds
“When we look at all of the information that we have available to us for the likely candidate for having gotten this done, all of the breadcrumbs point to the Lazarus Group, part of a large North Korean organized criminal organization.”
How the Exploit Created Bad Debt on Aave
Miguel explains the mechanics of the exploit: the fake RSETH was treated as valid collateral by Aave, allowing the hackers to withdraw $228M in real WETH while leaving the protocol with worthless tokens and massive bad debt.
The Controversial Freeze by Arbitrum Security Council
“We were able to use that same tactic and actually in because if we wanted to give ourselves new rules or upgrade the the software of the arbitram node we could do that and we could do other things...”
The Ethics and Philosophy of Emergency Governance
“Blockchain technology is open, modifiable. It's it's just code right running on servers and social consensus. And that social consensus piece is the thing that destroys the idea of immutability.”
“Blockchain technology is open, modifiable. It's it's just code right running on servers and social consensus. And that social consensus piece is the thing that destroys the idea of immutability.”
“If you can stop North Korea, you do it. If you can recover users' funds, you do it. If it's in your power, you take the power to do what's right.”
“When we look at all of the information that we have available to us for the likely candidate for having gotten this done, all of the breadcrumbs point to the Lazarus Group, part of a large North Korean organized criminal organization.”
Host
Guests
Griff Green
person
Arbitrum Security Council
organization
KelpDAO
organization
Aave
organization
Arbitrum DAO
organization
Miguel Morrell
person
Layer Zero
organization
Lazarus Group
organization
Arkham
organization
DAO Security Fund
organization
Quantum Computing Got 20x Closer. It Threatens A Third of All Bitcoin
Unchained • 1h 9m • 4/3/2026
DEX in the City: Why the Prediction Market Bans Could Just Be Beginning
Unchained • 41m • 4/3/2026
How Solana's Largest Perp DEX Was Exploited for $285 Million
Unchained • 38m • 4/4/2026
How Bitcoin Is Both a Risk Asset and a Hedge Against Debasement
Unchained • 46m • 4/5/2026
Do Centralized Real World Assets on DeFi Break Ethereum? - Bits + Bips
Unchained • 1h 4m • 4/5/2026
Get the full intelligence
Search transcripts, export clips, track mentions, and explore all topics from “Arbitrum Froze $70M From North Korea? Griff Green on the Decision + Miguel Morel on the Hack” inside PodZeus.
Start discovering podcast insights today
Start with a 7-day trial and explore a growing catalog of popular podcasts. No credit card required.
No credit card required • 7-day trial • Cancel anytime
