Let's talk about today's big news

LayerZero Labs finally came out and admitted: the rsETH incident was caused by a vulnerability in our bridge to DVN.
How to compensate? They are directly paying 10k ETH (about $23 million)—5,000 ETH donated to DeFi United, and 5,000 ETH directly injected into the Aave market to boost liquidity.
Including previous contributions, DeFi United has now raised over 140k ETH (about $330 million).
Consensys, Arbitrum DAO, Aave DAO, Compound, Mantle, LayerZero... all the notable names are here.
This is the largest industry-led rescue effort in DeFi history. A systemic crisis triggered by a single vulnerability, ultimately covered by the entire industry pooling funds.
LayerZero admits fault and pays up, while the Arbitrum Security Committee’s frozen $71 million worth of ETH still hasn't been unfrozen.
The absurdity of this situation is like your house catching fire, neighbors bringing buckets to help, but your security guard locking your water faucet—saying, “We are exercising emergency powers.”
Where exactly are the boundaries of DAO’s “emergency powers”?
Who appointed the Arbitrum Security Committee? The DAO did.
Do they have the authority to freeze assets in “emergency” situations? Yes, as written in the code.
But the question is—who defines “emergency”? When to freeze? When to unfreeze? Who supervises? Who is held accountable?
Many think: it’s just a freeze, for safety’s sake, just endure it.
Let me tell you why that’s not acceptable:
First, this is selective decentralization.
In emergencies, they freeze assets using authority. When it’s time for accountability, they shift blame with decentralization. All the benefits are theirs, all the responsibility is avoided.
Second, setting a bad precedent.
Today Arbitrum can freeze $71 million, but tomorrow could it be Optimism? The day after zkSync? Or some other L2’s security committee could directly “protectively freeze” your wallet’s funds?
Third, the more successful the industry’s self-rescue, the easier it becomes to hide governance issues.
Everyone is busy raising funds to patch the holes—who’s paying attention to “who approved the freeze”? Once the spotlight passes, no one will bring it up again.
I’m not saying security committees shouldn’t exist. In extreme cases, emergency response capabilities are indeed necessary.
But power must come with transparency and accountability.
A clear set of rules is needed:
- What constitutes an “emergency”?
- What is the maximum duration?
- What happens if it exceeds the limit?
- How to compensate for wrongful freezing?