Storing cryptocurrency in your own wallet with full control over the private key does not guarantee the exclusive right to dispose of assets. Network rules can override whoever controls its key smart contracts. A clear example of this is the episode in Arbitrum, where the Security Council forcibly moved about $30 million linked to the Binance attack without requesting the wallet owner's key.
How the network moved someone else's funds
On October 30, the Arbitrum Security Council forcibly transferred 8,425 ETH and 74.6 million ARB linked to the attack to a special storage address. The combined value of these assets is estimated at approximately $30 million.
Notably, the wallet owner's private key was not required for the transfer. The Council temporarily modified the network's system smart contract, executed two transactions on behalf of the attacker's address, and then restored the previous code. The funds are locked pending a separate ArbitrumDAO decision. Other users' assets were not affected.
Powers are built into the network architecture
Arbitrum is an Ethereum layer-2 network providing faster and cheaper transactions, but part of its infrastructure is managed through upgradeable smart contracts. Emergency decisions are handled by a 12-member Security Council: intervention requires the consent of at least nine of them. Such powers are provided for by ArbitrumDAO rules and are intended for emergency situations.
This time, the council temporarily upgraded the Inbox contract, which is responsible for relaying messages from Ethereum to Arbitrum. The change made it possible to form transactions on behalf of the attacker's wallet without its cryptographic signature. The operation was not the result of a wallet hack or a discovered vulnerability — the developers used powers that already existed in the network's architecture.
Such intervention is not happening for the first time. In April 2026, the council moved approximately 30,800 ETH linked to the KelpDAO hack in a similar manner. This is not an accidental technical capability, but a provided emergency governance mechanism.
Community reaction
Opinions on social media were divided. Some users called the intervention impressive from a security standpoint but acknowledged that it raises an uncomfortable question about decentralization. Many would have preferred the funds to go to the network's team rather than to hackers. Others reacted more harshly, declaring a loss of trust in Arbitrum: in their view, the precedent itself breaks the foundation for which cryptocurrency was created.
Opponents reminded that this concerns one L2 network, not Bitcoin or Ethereum, and that Arbitrum never concealed the existence of such powers held by the council — they are documented. The problem is rather that most users consider the private key to be the only thing that matters.
The scale was also discussed: the moved $30 million amounted to about half a percent of the $6.3 billion stolen from Binance. In response to criticism of centralized networks and stablecoins, another argument was raised — the same control mechanisms made it possible to freeze $2.85 billion within hours.
Self-custody wallet does not guarantee full control
Amid restrictions on international crypto exchanges, many investors view self-custody as the most reliable alternative. Unlike an exchange account, private keys are held by the owner themselves, and an intermediary cannot block withdrawals at its own discretion.
However, another level of risk must be considered here — the design of the network itself. The Ethereum mainnet has no equivalent of the Arbitrum council that could, through an emergency upgrade, execute a transfer of native ETH on behalf of an arbitrary user. In some L2 networks, such powers are provided for by the governance architecture. As a result, ETH on Ethereum and ETH on Arbitrum may have the same market value but differ in the conditions of control over the asset.
There is another example — stablecoins. Even when holding USDT in your own wallet, the issuer can block tokens at a specific address. Here, the limitations arise not at the level of blockchain governance, but at the level of the asset itself.
Investor protection or excessive powers
The Arbitrum decision has an obvious positive side: the possibility of emergency intervention made it possible to remove the stolen assets from the attacker's control. Without such a mechanism, the likelihood of their further movement and laundering would have been significantly higher.
At the same time, the powers that protect victims could theoretically be used against other addresses as well. The question is not so much whether such mechanisms exist, but who controls them, how transparent the grounds for intervention are, and what restrictions are in place for decision-makers. In the case of Arbitrum, the consent of nine Security Council members is required, and further disposal of the blocked funds must go through a DAO vote.
For institutional investors, such a design may prove to be an advantage, since the emergency response mechanism enhances asset protection capabilities. For supporters of maximum independence from intermediaries, it is an additional risk.
What an investor should consider
When choosing a network for storing cryptocurrency, it is worth paying attention not only to fees, transaction speed, and wallet convenience. It is equally important to understand: who has the right to upgrade key smart contracts; how many signatures are required for emergency intervention; whether a delay before upgrades is provided; whether the user can withdraw funds in a timely manner. Separately, it is worth checking the terms of cross-chain bridges and the powers of the issuer of a specific token.
For small everyday transactions, the advantages of L2 may fully justify the additional infrastructure risks. But for long-term storage of significant capital, the balance between transaction costs and ownership independence becomes substantially more important.
The Arbitrum story does not prove that self-custody is unsafe. It also does not mean that the managers of any network can arbitrarily dispose of user assets. The main takeaway: cryptocurrency may be in the investor's own wallet, but the final rules for disposing of it are determined not only by the private key, but also by the blockchain's architecture.
Cryptalist analysis: The Arbitrum precedent exposes the fundamental trade-off between security and decentralization in L2 ecosystems: the emergency intervention mechanism proved effective in dealing with the aftermath of hacks, but at the same time established that property rights in such networks are conditional and derivative of the governance architecture. For the market, this is a signal to reassess risks when allocating capital to L2 networks with upgradeable contracts and to growing demand for transparent governance models with clear procedural constraints. Institutional investors will increasingly evaluate not only returns and fees, but also the distribution of powers among the security council, the DAO, and key holders.