Arbitrum Security Council freezes ETH via Inbox upgrade override

An analysis of Arbitrum's security council emergency freezes reveals how proxy upgrades allow transactions to be sent from an address without its private key. By temporarily altering the Inbox implementation to record a target address directly without an alias, the council executes forced L2 transactions with zeroed signatures. The author argues that specifications assuming only an agent's key can move its wallet must account for whoever controls the chain's upgrade path. Open article →