Arbitrum council moves $30M of Binance hack funds without key

What happened

Normally, spending from an address requires the key that controls it. The council did not have that key. Instead, it changed the logic of a core Arbitrum contract for a short period, which allowed the transfer to go through, and then reverted the contract to its earlier state.

The approach shows that the council can alter how the network behaves at the contract level when it decides an emergency justifies it. The change was temporary, and the code was restored after the funds were moved.

Why it matters

The episode reopens a familiar debate in crypto about how much power a small group should hold over a network that is often described as decentralized. Recovering stolen funds is a clear benefit for victims, but the same mechanism, which can move assets from an address without its owner's signature, raises questions about the limits of that authority and how it is checked.

For users and developers building on Arbitrum, the repeat use is a signal that emergency intervention is part of how the network operates in practice, not a one-off exception. The fact that the contract was changed and then reverted may reassure some, while others will want clearer rules on when the council may act.

What the council will publish about the decision, and whether the community will seek formal limits on such actions, has not been detailed. Given that this is the second case in a year, scrutiny of the process is likely to continue.