Arbitrum is facing a mix of governance pressure, security fallout, and liquidity exit. A group including Aave Labs and KelpDAO has proposed releasing 30,765.67 ETH worth over $71 million, frozen by the Arbitrum Security Council, tied to the April 18 rsETH bridge exploit.
The Lazarus-linked $292 million DeFi hack has triggered $13–15 billion in DeFi TVL outflows, with Arbitrum freezing about $71 million in stolen funds. On-chain data from RWA.xyz also shows a $19 million net capital outflow over the past 30 days, even as ARB price trades near $0.1322, placing the network under pressure from multiple sides at once.
Arbitrum (ARB) DeFi Security & $292M Exploit Impact
The Lazarus-linked attack has become one of the most damaging DeFi events of 2026. The $292 million loss tied to Kelp DAO exposed weaknesses in bridge infrastructure and liquidity routing systems across DeFi. Total sector outflows of $13–15 billion followed the incident, showing how quickly capital reacts to security breaches. Arbitrum’s response included freezing about $71 million linked to the exploit. That action shows the network can contain damage quickly, but it also raises questions around control points in systems marketed as decentralized. The governance proposal requesting ETH release adds complexity, since multiple protocols must coordinate through a 49-day process to return funds to affected users.
Arbitrum Capital Outflows & Market Rotation
Data from RWA.xyz shows Arbitrum recorded a net $19 million capital outflow over the past 30 days. This contrasts with inflows into other ecosystems such as Ethereum, which recorded $879 million, and XRP Ledger, which saw $1.1 billion over the same period. This type of rotation often appears when liquidity searches for stronger yield environments or alternative narratives across chains. Market participants also track ecosystems like NEAR, where the NEAR price is used as a reference point for comparing activity between Layer 1 and Layer 2 networks. Arbitrum’s outflows show the competitive pressure across the broader smart contract landscape.
Despite liquidity pressure, Arbitrum (ARB) continues to expand its role in real-world assets. Data shared by Karamata shows the network leads all blockchains with 1,938 tokenized RWA assets. Total distributed asset value stands at $874.19 million, supported by 6,596 holders and roughly $345 million in 30-day transfer volume. Stablecoin supply exceeds $7.24 billion, forming a deep liquidity base for ecosystem activity. Institutional involvement adds further depth. BlackRock’s BUIDL fund via Securitize, Franklin Templeton’s onchain money market fund, WisdomTree’s tokenized funds, and Robinhood’s tokenized equities for European users all contribute to rising real-world integration. Protocols such as Ondo Finance and Centrifuge continue deployment on Arbitrum due to low fees, EVM compatibility, and composability with DeFi systems.
Arbitrum faces pressure from governance stress, a major DeFi exploit, and capital rotation, yet its RWA ecosystem continues to expand with institutional participation and deep liquidity infrastructure. With ARB price near $0.1322, the market is balancing short-term uncertainty against longer-term adoption driven by real-world asset integration and onchain financial infrastructure.
DeFi Platforms Petition Arbitrum DAO for Release of $71M in Frozen Ethereum
Aave Labs has teamed up with KelpDAO, LayerZero, EtherFi, Compound, and other key participants to ask Arbitrum’s governance community to unlock roughly $71 million in Ethereum that was seized earlier this month. The assets—precisely 30,765.67 ETH—were frozen by Arbitrum’s Security Council on April 21 and moved to a controlled address after the April 18 breach that drained approximately 116,500 rsETH through a compromised LayerZero bridge. The proposal, filed as a Constitutional AIP on April 25, would route these funds into an ongoing multi-protocol recovery program aimed at fully restoring rsETH’s collateral backing and making affected holders whole.
The exploit created a substantial shortfall in rsETH’s reserves, triggering bad debt across lending platforms, including Aave’s deployments on Ethereum and Arbitrum. Attackers had used the stolen tokens as collateral to borrow wrapped ETH before markets were paused. The frozen ETH on Arbitrum now represents a critical recovered portion of the losses—about a quarter of the total drained value—and its release would directly reduce the impairment on rsETH while easing pressure on interconnected DeFi markets.
Under the plan, the ETH would be sent to a secure 2-of-3 Gnosis Safe controlled by Aave Labs, KelpDAO, and Certora for exclusive use in the remediation effort. If the recovery falls short, the parties have committed to returning to Arbitrum governance for further guidance. This initiative, often referred to in ecosystem discussions as a unified DeFi response, highlights how quickly protocols can mobilize when user funds and protocol solvency are at stake. It also tests Arbitrum’s governance process, requiring token-holder approval to move funds previously immobilized under emergency powers.
Adding momentum from another major blockchain, the Solana Foundation has stepped forward with concrete support for Aave. Foundation Chair Lily Liu announced that the organization has deployed USDT from its treasury into Aave for the first time, providing immediate liquidity to help stabilize the protocol during the recovery phase. Liu emphasized that Solana’s health is tied to the broader DeFi ecosystem’s stability. At the same time, the Foundation confirmed plans to launch the AAVE governance token on Solana as soon as this weekend, potentially opening new avenues for liquidity and user participation on the high-speed network.
Together, these steps demonstrate a maturing DeFi landscape where Layer-2 governance decisions, cross-protocol coordination, and Layer-1 liquidity injections work in tandem to contain incidents and rebuild trust. The Arbitrum proposal is now open for community discussion and voting, while Solana’s contributions underscore growing interoperability across chains. Meaningful progress to some extent here could serve as a blueprint for handling future systemic events, prioritizing user protection and protocol resilience over fragmented responses.