Arbitrum Council Moves $ARB, ETH Without Wallet Key
The Arbitrum Security Council transferred roughly 74.56 million ARB and about 8,426 ETH from a wallet tied to the Binance exploit without its private key.
Updated on Nov. 3, 2026 in Cybersecurity
On October 29, 2026, the Arbitrum Security Council moved 74,559,805.2 ARB and about 8,426 ETH to a temporary holding address ending in 0DA0, without the targeted wallet's private key. Arbitrum One processed both transfers nine minutes and 45 seconds later.
Why it matters
The transfers show that the council can move assets from a wallet it previously froze, raising questions about control and custody on the network. Because the assets can now only be moved through an ArbitrumDAO Governance vote, the outcome depends on that process.
The council's 9-of-12 Safe called Ethereum's L1 UpgradeExecutor, which briefly redirected the Inbox proxy to an override implementation that let Arbitrum One process messages as if they came from the targeted wallet. The original implementation was restored after the messages were submitted, and the transactions carried blank signature fields.
The players
Arbitrum Security Council
The Arbitrum Security Council is a multisig body of 12 members that oversees emergency actions on the Arbitrum network, and its 9-of-12 Safe executed these transfers.
The details
The council's Safe called the UpgradeExecutor on Ethereum's L1, which temporarily pointed the Inbox proxy to an override implementation. The original implementation was then restored, and both transfers were processed on Arbitrum One nine minutes and 45 seconds after the council's move.
Timeline
October 29, 2026, 8:08 p.m. ET (October 30, 2026, 12:08 a.m. UTC): Council transferred ARB and ETH to a temporary holding address.
Nine minutes and 45 seconds later: Arbitrum One processed both transfers.
The Tech Race
Under ArbitrumDAO's governance framework, any movement of these assets now requires a community vote, which constrains the council's emergency powers. The episode tests how layer-2 networks balance rapid security intervention against decentralized control.
Users holding ARB or interacting with Arbitrum One should understand that council-controlled assets can be redirected through emergency mechanisms. Any eventual recovery or redistribution of these funds will depend on the outcome of an ArbitrumDAO Governance vote.
The takeaway
Holders of layer-2 assets should watch how governance votes resolve custody questions, since emergency council powers can move funds without a holder's private key. Following ArbitrumDAO proposals is the most direct way to track what happens next.
Further reading
Explore more in Cybersecurity coverage of how blockchain exploits and emergency responses are handled.
