Arbitrum's Kelp Freeze Makes L2 Governance an LP Risk
The most interesting part of the Kelp rsETH exploit is no longer the bridge failure alone.
That was already ugly enough. On April 18, 2026, an attacker used Kelp's LayerZero V2 Unichain-to-Ethereum rsETH route to release 116,500 rsETH from the Ethereum-side adapter without a matching source-side burn, according to Aave's April 20 incident report (Aave governance). That immediately turned a liquid restaking token into a collateral-quality problem for every protocol that had treated it as good ETH-adjacent inventory.
But the sharper market-structure lesson arrived in the late April 20 / early April 21 window: the Arbitrum Security Council froze 30,765.6675 ETH linked to the Kelp exploiter and moved it to an address that can only be released by later governance action (Arbitrum forum).
For traders, that sounds like recovery. For LPs and lenders, it is more complicated. The same event that may reduce losses also proves that the settlement layer has an emergency brake.
That brake now has to be priced.