POPA ReconThe Arbitrum Security Council froze 8,425 ETH and 74,559,805.2 ARB linked to the Oct 29 Binance exploit on Arbitrum One, moving them to intermediary frozen wallet 0x0000…0DA0 at 8:08 HKT Oct 30 (00:08 UTC), per its forum post and its X announcement.
It did it without the hacker's signature by atomically upgrading the Inbox contract on Ethereum to add sendUnsignedTransactionOverride, which mimics a standard cross-chain transaction but impersonates the sender. Two such cross-chain transactions moved the funds from the attacker address, then the Inbox was upgraded back to the original implementation. Payload was prepared by Arbitrum contributors and verified and signed by the Council.
The Council says no other user funds, chain state or applications were affected. The funds are no longer accessible to the original holder.
What happens next: they can only be moved by further Security Council action or an ArbitrumDAO governance vote coordinated with relevant parties, i.e. expected return to Binance following the same procedure as the April freeze.