Arbitrum's Security Council initiated the transfer of Binance exploit funds by calling the UpgradeExecutor contract through its Safe wallet in Ethereum block 26301886

From the articleArbitrum's Security Council Can Move a Wallet's Funds Without Its Key, Binance Freeze Shows - UnchainedAlso in Arbitrum’s council moved $30 million of Binance hack funds without the hacker’s key