The Arbitrum Security Council moved swiftly this week to contain the fallout from the KelpDAO exploit, touting the emergency “freeze” of more than 30,000 ETH linked to the attacker as a win for user protection. But beneath the language of containment, the intervention has reopened one of crypto’s oldest and most uncomfortable debates: What decentralization actually means when a group of people can step in and override outcomes for a network after the fact. At the center of the debate is the role of Arbitrum’s Security Council, a small, elected group chosen by token holders every 6 months, empowered to act in emergencies. In this case, it exercised those powers to take control of funds associated with the exploit, effectively locking them away pending further governance decisions. Supporters see this as a system working as intended, preventing tens of millions of dollars from being laundered and buying time for potential recovery. Critics, however, argued the move underscores a different reality: That even in ostensibly decentralized systems, ultimate control can still rest with a handful of actors. For Arbitrum insiders, however, the decision was far from a reflexive intervention. According to Steven Goldfeder, co-founder of Offchain Labs, the company that originally created and supports Arbitrum, the starting point was inaction. “The default was do nothing,” Goldfeder said to CoinDesk, describing the early stages of the Security Council’s deliberations. “Then this idea actually emerged [from a security council member]… a way to do it in a very surgical way… without affecting any other user, not affecting the network performance and not having any downtime.” The result was what Arbitrum has described as a “freeze.” But technically, the move required something more active: The use of privileged powers to transfer funds out of the attacker-controlled address and into a wallet with no owner, effectively rendering them immobile. That distinction is at the heart o