16 Blockchains Can Freeze Your Wallet - No Exchange Required

TL;DR - At least 16 blockchains, including Arbitrum, can freeze a wallet's funds directly at the protocol level, with no exchange or stablecoin issuer involved.

On April 20, 2026, Arbitrum's Security Council moved 30,766 ETH - about $71 million - out of a hacker's wallet and into cold storage, without touching an exchange or a stablecoin issuer. The funds trace back to the Kelp DAO exploit two days earlier, a $292 million bridge hack that the cross-chain messaging firm LayerZero linked to North Korea's Lazarus Group. Most explainers on wallet freezes cover how Tether blacklists an address or how Coinbase blocks a withdrawal. Few mention that the blockchain itself can freeze funds with no exchange account anywhere in the loop.

What happened when Arbitrum froze $71 million without an exchange?

Arbitrum's Security Council is a 12-member multisig, elected by ARB token holders every six months, and on the night of April 20 it used its emergency powers to redirect the stolen ETH into a wallet nobody controls. Patrick McCorry, the Arbitrum Foundation's head of research, told CoinDesk the council is "a very transparent part of the system" where token holders "can see exactly what powers they have." Those powers turned out broad enough to move $71 million in a single transaction, with no vote taken first.

The attacker had already laundered most of the rest by the time the council acted, so the frozen amount covers roughly a quarter of the $292 million taken. Steven Goldfeder, one of the researchers who backed the freeze, said the default was to do nothing - and by the time a full DAO vote wrapped up, the remaining funds would already be gone. Twelve elected signers held the keys. They used them without a vote.

How does a blockchain-level freeze actually work?

It depends on which layer freezes the funds. A stablecoin issuer like Tether or Circle can blacklist an address inside the token's own smart contract, which stops that specific token from moving but leaves the rest of the chain untouched. An exchange freezes a wallet by holding it on an internal ledger, which only affects that one platform. A blockchain-level freeze is different: it changes what the network itself will process, and it can reach funds no exchange or issuer ever touched.

Bybit's Lazarus Security Lab audited 166 blockchain networks in 2026 and found 16 already had freezing capability built in, with 19 more able to add it through a minor code change. Five networks - BNB Chain, VeChain, Chiliz, VIC, and XDC - hardcode freezing directly into their security code. Ten more, including Sui and Aptos, freeze funds through validator configuration files that require a coordinated node restart to take effect.

Neither route needs an exchange, a court order, or the account holder's consent.

Which blockchains can freeze wallets like this?

Three cases already show the pattern in use.

• BNB Chain froze addresses tied to a $570 million cross-chain bridge hack in 2022.
• VeChain blocklisted 469 addresses after a 2019 breach that cost its foundation $6.6 million in VET tokens.
• Sui froze $162 million connected to the 2025 Cetus DEX exploit.

Arbitrum wasn't on Bybit's list of chains with freezing hardcoded in - its Security Council relied on a broader set of emergency powers instead. But Cosmos, Axelar, Babylon, Celestia, and Kava all sit one code change away from the same capability, according to the same report. The 16-chain count from Bybit is a floor, not a ceiling.

Does a blockchain freeze mean the funds are safe?

No. A freeze locks funds in place. It doesn't return them to victims, and it doesn't undo the theft. On Arbitrum, the $71 million now sits in a wallet nobody can move without future governance approval, and "future" carries no deadline.

That distinction matters if your own wallet ever transacted near a frozen address. Frozen funds don't vanish from the blockchain - they sit there, visible, tied to an open case. A wallet a few hops downstream can still get flagged by an exchange's compliance team even though nothing about it was technically frozen. That's the same mechanism behind what happens when a wallet gets flagged after a bridge hack: proximity to stolen funds, not personal wrongdoing, triggers the flag.

Frozen isn't fixed.

Can courts get involved once a blockchain freezes funds?

Yes, and the Kelp DAO case already shows how. On May 1, 2026, the U.S. District Court for the Southern District of New York blocked Arbitrum's DAO from moving the frozen $71 million at all. Two U.S. nationals, relatives of someone killed in a 2015 attack linked to North Korea, had already won a judgment worth more than $300 million against Pyongyang. Once LayerZero's attribution tied the stolen ETH to Lazarus Group, their attorneys sought a garnishment order against it.

Attorney Gabriel Shapiro summed up the result: the DAO "is not allowed to do anything with the KelpDAO funds for now, until a divestiture hearing." No date for that hearing had been set as of this writing.

A blockchain freeze doesn't end the story. Sometimes it's just where the lawsuit starts.

How do you check if your wallet carries this kind of exposure?

Anyone can look up a single transaction on a block explorer like Arbiscan or Etherscan and see whether an address ever sent or received funds tied to a frozen or flagged wallet. That check only shows one hop, though, and it won't tell you how many degrees of separation exist between your wallet and a known exploit address. Rather than checking one explorer at a time, screen the wallet with Plastron to see exposure across sanctions lists, mixers, and stolen-funds addresses in a single report.

Plastron's own screening corpus carries 3,901 labeled addresses across scam, fraud, and hack-exploit categories, plus a 780-entry OFAC SDN list refreshed daily, checked across Ethereum and 6 other chains. That multi-hop, multi-category view is what a single block-explorer lookup can't give you. For hack-specific exposure, a dedicated bridge exploit check or a full sanctions screen covers the two most common freeze triggers side by side.

FAQ

Is a blockchain freeze the same as an OFAC sanction?

No. An OFAC sanction is a designation on a U.S. government list, and it applies no matter which blockchain the address sits on. A blockchain freeze is a technical action taken by validators or a governing council on one specific network - a wallet can be frozen on Arbitrum without ever appearing on OFAC's SDN list, and vice versa.

Can Ethereum mainnet itself freeze a wallet?

Not directly. Ethereum's base layer has no built-in freeze function or validator kill switch for individual addresses. The freezing capability documented by Bybit's Lazarus Security Lab sits on other networks and Layer 2s - like Arbitrum's Security Council - that added their own governance or validator-level controls on top.

Does a blockchain freeze undo the hack?

No. It stops the stolen funds from moving further. It doesn't reverse the theft or automatically return money to victims. The Kelp DAO freeze recovered about a quarter of the $292 million stolen, and even that quarter stayed locked in legal limbo months later.

Which wallets are most likely to see this kind of freeze?

Wallets holding large sums traced to an attributed hack or exploit, on a chain where validators or a security council already hold freezing power. Small, unattributed transfers rarely trigger this kind of intervention - the Kelp DAO freeze happened because LayerZero's forensic trace and the size of the theft made the attacker's address impossible to ignore.