The cryptocurrency exchange Binance has formally submitted a draft Constitutional Arbitrum Improvement Proposal (AIP) to the Arbitrum DAO, seeking the return of significant digital assets frozen following a major security breach. The request involves the transfer of 8,425.997 ETH and 74,559,805.2 ARB — valued at approximately $30.5 million — from a designated holding address to a recovery wallet controlled by the exchange. These funds were intercepted by the Arbitrum Security Council on October 30, 2026, shortly after an attack on Binance's hot wallet infrastructure.
Emergency Freeze and Technical Intervention
The assets in question were secured through an emergency intervention by the Arbitrum Security Council, a 12-member body authorized to take swift action in the event of catastrophic protocol risks or major exploits. According to technical disclosures, the council utilized its emergency upgrade powers to temporarily modify the Arbitrum Inbox contract on the Ethereum mainnet. This modification allowed the council to execute an unsigned transaction, effectively moving the stolen funds from the attacker's address to a secure intermediary vault without requiring the hacker's private keys.
- Assets Recovered: 8,425.997 ETH and 74,559,805.2 ARB.
- Mechanism: Temporary contract upgrade to bypass private key requirements.
- Security Context: The move followed a broader exploit estimated at $6.3 billion, primarily affecting Binance's hot wallets.
Governance Process and Recovery Timeline
The proposal is currently in the forum discussion phase, where delegates and community members evaluate the legal and technical aspects of the return. Following this period, the proposal must undergo a Snapshot signaling vote (temperature check) before proceeding to a binding on-chain governance vote. Binance representatives estimate the entire recovery process will take approximately 49 days to complete.
Releasing the assets would require a similar temporary upgrade, this time authorized through DAO governance, to transfer them to Binance's designated recovery address.
The exchange has clarified that the recovered funds will be used to replenish its Secure Asset Fund for Users (SAFU) and other internal reserves used to compensate affected customers. The proposal emphasizes that the return of these assets will not require any additional expenditure from the Arbitrum DAO treasury. However, the timeline may be extended if any jurisdictional legal proceedings restrict the immediate transfer of the digital assets.
This incident marks the second time the Arbitrum Security Council has used such powers to recover stolen assets, following a similar intervention in April 2026 related to the KelpDAO exploit. While the move has been praised for protecting user funds, it has also sparked discussions within the decentralized finance (DeFi) community regarding the balance between emergency oversight and the core blockchain principle of sovereign asset control.
Frequently Asked Questions
Quick answers to the most common questions about this topic.