At 8:08am HKT, 30th October 2026, the Security Council executed an emergency action to freeze 8,425 ETH and 74,559,805.2 ARB held on Arbitrum One by an address identified with today’s Binance exploit. The funds are now held at 0x0000000000000000000000000000000000000DA0. The funds can only be moved by an ArbitrumDAO Governance vote, which will be coordinated with relevant parties.
Key point: Funds associated with the Binance exploit are frozen on Arbitrum One. No other user’s funds or applications were affected.
Security Council Actions
The technical approach taken by the Security Council was to implement an atomic action to upgrade the inbox contract on Ethereum, freeze the funds, and return the contract back to its original implementation.
The Inbox Contract was upgraded to add a new function, sendUnsignedTransactionOverride, which imitates the structure of a standard cross-chain transaction with the ability to impersonate the transaction sender. Two cross-chain transactions were created to impersonate the address associated with the Binance exploit, and these transactions transferred the stolen funds to 0x0000000000000000000000000000000000000DA0. Finally, the inbox implementation was upgraded to return it back to the original implementation.
Arbitrum contributors prepared the transaction payload and it was verified by the Security Council before it was signed and executed. The current Security Council members are listed at Security Council Members | Arbitrum DAO - Governance docs.
Emergency Action Transaction
The Security Council signed the following transactions to perform the on-chain action:
The frozen funds can be found at https://arbiscan.io/address/0x0000000000000000000000000000000000000DA0