#Gate13thAnniversaryLive The Anatomy of the Exploit

While the impact was felt across the ecosystem, the "technical vulnerability" you mentioned was specifically a 1-of-1 verifier configuration error in KelpDAO’s cross-chain architecture (powered by LayerZero).
The Attack Vector: The attackers (linked by security firms to the Lazarus Group) used a sophisticated DDoS attack to take down legitimate RPC nodes. This forced a "failover" to malicious nodes they controlled.
The "Mint": By controlling the data source, they tricked a single verifier into authorizing the release of 116,500 rsETH (approx. $292 million).
The Strategy: The hacker quickly deposited the stolen assets into Aave V3 as collateral to borrow "clean" wrapped ETH, creating a massive debt hole for the lending protocol before it could be frozen.
Arbitrum’s "Surgical" Intervention
You noted that the movement of ETH was "restricted." To be precise, the Arbitrum Security Council (a 12-member body) took the unprecedented step of executing an emergency action to move 30,766 ETH (worth ~$71M) out of the hacker’s address. The "Security vs. Decentralization" Paradox
The debate you mentioned is currently at a fever pitch.
The Pragmatists: Argue that "DeFi won" because $71 million was snatched back from a state-sponsored hacking group. Without this "centralized" safety net, those funds would likely be in a mixer by now.
The Purists: Contend that if a council can "pose as the hacker" to move funds without a private key, the "censorship resistance" of the network is a myth. As some critics put it, "If they can do it to a hacker, they can do it to you."
What's Next?
The KelpDAO team is currently working on compensation mechanisms, but since only about 25% of the stolen funds were recovered by Arbitrum (the rest moved across other chains), the path to making users 100% whole remains a steep climb.
This incident has effectively ended the era of "move fast and break things" for L2 security councils. We are now seeing a massive push for multi-signature verifiers and automated circuit breakers that don't rely on human intervention.