Logan in the Cryptoverse

The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications. After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move funds to safety without affecting any other chain state or Arbitrum users. As of April 20 11:26pm ET the funds have been successfully transferred to an intermediary frozen wallet. They are no longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance, which will be coordinated with relevant parties.

This notice is issued on behalf of Resolv Digital Assets Ltd. in relation to the Resolv protocol. Earlier today, a malicious actor gained unauthorized access to Resolv infrastructure through compromised private key, resulting in the minting of approximately $80M of uncollateralized USR. A full post-mortem is currently in progress and will be shared once completed. The incident was identified quickly, and the relevant smart contracts were promptly paused. Approximately 9M USR held by the attacker has since been burned in order to reduce the potential impact. The protocol currently holds approximately $141M in assets, with the only realized impact identified to date being approximately $0.5M in redemptions processed prior to the pause. Current USR supply consists of 102M pre-incident USR and approximately 71M newly and illicitly minted tokens. As an initial step in the recovery process, we are preparing to enable redemptions for all pre-incident USR, beginning with allowlisted users. The current target start date is 23 March 2026. Affected users should coordinate directly with RDAL through official channels. This incident resulted from unauthorized third-party actions, including a targeted infrastructure compromise and cyberattack. Resolv’s underlying collateral was not directly compromised. We are actively:  • tracing and seeking to contain illicitly minted USR and other affected assets  • coordinating with partners and counterparties  • working with law enforcement and onchain analytics firms to identify those responsible We will pursue all available avenues to recover assets and hold those responsible accountable. We strongly advise against trading USR or related Resolv tokens at this time while recovery measures are being implemented. Actions of users during post-exploit period may affect the recovery. Further updates regarding illicit USR, and RLP will be communicated in the near term.