Is Arbitrum Decentralised? Understanding the Security Council and Progressive Decentralisation

Arbitrum decentralisation is not a simple yes or no. As one of Ethereum's largest layer-2 rollups, Arbitrum uses a progressive decentralisation model, gradually reducing centralized control over time. 

Some parts are fully decentralized, others remain permissioned, and a powerful Security Council sits at the center.

Let's break down how decentralized Arbitrum really is.

Key Takeaways

• Arbitrum is not fully decentralised — validation on Arbitrum One is permissionless, but the sequencer remains centralised and the Security Council (9-of-12 multisig) holds emergency powers to freeze funds.

• The Security Council recently froze $70M in ETH stolen from the KelpDAO exploit, demonstrating both its power and the trade-off between security and pure decentralisation.

• Users have several weeks to withdraw funds to Ethereum before any malicious DAO proposal or Security Council action takes effect — a critical safety feature.

Trade with confidence. Bitrue is a secure and trusted crypto trading platform for buying, selling, and trading Bitcoin and altcoins.
Register Now to Claim Your Prize!

What Is Progressive Decentralisation?

Arbitrum progressive decentralisation model means starting with more centralized "training wheels" and slowly removing them as technology and governance mature. Arbitrum hasn't reached full decentralization yet, but it's on a clear path.

The key components determining Arbitrum's decentralization are chain ownership, validation, sequencer control, and the Data Availability Committee (for Nova).

The Arbitrum Security Council: Who Really Holds Power?

Arbitrum Security Council explained, it's a 9-of-12 multisig wallet. Nine out of twelve members must agree to take action.

The Security Council has two roles. First, fast action for emergencies, they can freeze funds, pause the system, and respond to exploits. Second, slow action for routine upgrades, minor bug fixes and non-emergency changes.

Members are elected every six months by ARB token holders through DAO votes.

Real-World Example: KelpDAO Exploit

On April 21, 2026, the Security Council froze 30,766 ETH (over $70 million) stolen in the KelpDAO hack. They coordinated with law enforcement, identified a technical approach, and moved the funds to a frozen wallet within hours. The exploiter can no longer access them.

This shows both the power of the Security Council, and raises questions about decentralization when a small group can freeze funds.

Read also : Are Banks Losing Confidence in Crypto After Recent Hacks?

How Decentralised Is Each Component?

Chain ownership is governed by the Arbitrum DAO (token holders) with the Security Council able to act only in critical emergencies. 

The DAO votes on upgrades through governance proposals. If 9 of 12 Security Council members are compromised, funds could be at risk.

Validation on Arbitrum One is fully permissionless, anyone running the BoLD protocol can validate transactions. This is a major milestone for decentralization. 

However, Arbitrum Nova remains permissioned because it relies on a trusted Data Availability committee.

The sequencer, which orders transactions, remains centralized and is currently run by the Arbitrum Foundation. 

It can delay or reorder transactions but cannot prevent final execution. Governance has the power to elect a new sequencer.

The Data Availability Committee applies only to Arbitrum Nova. 

It has 6 members including Google Cloud, ConsenSys, and OpenSea. If 5 of 6 members collude with the sequencer, Nova's safety could be compromised.

Read also : Is AAVE Still Safe to Use in 2026 After the Recent Incident?

Risks You Should Know

Arbitrum's own documentation highlights several risks. If 9 of 12 Security Council members are compromised or behave maliciously, the system and users' funds could be compromised. 

If a malicious proposal successfully passes through DAO governance, the system's safety could also be at risk.

However, users have several weeks to withdraw their funds back to Ethereum before any malicious proposal takes effect. This withdrawal window is a critical safety feature.

For Arbitrum Nova specifically, if 5 of the 6 Data Availability committee members collude with the sequencer, the safety of the system can be compromised.

Conclusion: Is Arbitrum Decentralised Enough?

Arbitrum decentralisation is a work in progress. Validation on Arbitrum One is fully permissionless, a major achievement. Chain ownership is shared between the DAO and an elected Security Council. The sequencer remains centralized, and Arbitrum Nova is still permissioned.

The Security Council's recent action freezing $70 million in stolen funds demonstrates both its power and its utility. A fully decentralized system could not have done that. 

For most users, this trade-off, accepting some centralization for better security, is acceptable.

For purists seeking maximum decentralization, Ethereum L1 remains the only option. 

The sequencer is likely the next major milestone for Arbitrum's progressive decentralization.

FAQ

Is Arbitrum fully decentralised?

No. Validation on Arbitrum One is permissionless, but the sequencer remains centralized and the Security Council holds emergency powers.

What is the Arbitrum Security Council?

A 9-of-12 multisig elected by ARB token holders that can freeze funds, pause the system, and handle emergency situations.

What did the Security Council do in the KelpDAO hack?

They froze 30,766 ETH ($70+ million) stolen by the exploiter, preventing the hacker from accessing the funds.

Who controls the sequencer?

The Arbitrum Foundation currently runs the sequencer, but governance has the power to elect a new one.

Is Arbitrum One validation decentralised?

Yes, anyone running the BoLD protocol can validate on Arbitrum One. Arbitrum Nova remains permissioned.

Disclaimer: The views expressed belong exclusively to the author and do not reflect the views of this platform. This platform and its affiliates disclaim any responsibility for the accuracy or suitability of the information provided. It is for informational purposes only and not intended as financial or investment advice.