Three concurrent legal proceedings in U.S. federal courts are converging to define the liability framework for decentralized autonomous organizations. On May 4, 2026, Aave LLC filed an emergency motion in the Southern District of New York to vacate a restraining notice freezing 30,766 ETH ($71.1 ...
"A thief does not gain lawful ownership of stolen property simply by taking it, and the law is clear on this." — Morrison Cohen LLP, counsel for Aave LLC, in a 29-page memorandum filed in the Southern District of New York (May 4, 2026)
Three concurrent legal proceedings in U.S. federal courts are converging to define the liability framework for decentralized autonomous organizations. On May 4, 2026, Aave LLC filed an emergency motion in the Southern District of New York to vacate a restraining notice freezing 30,766 ETH ($71.1 million) held by Arbitrum DAO — assets recovered from the $292 million Kelp DAO bridge exploit attributed to North Korea's Lazarus Group. The plaintiffs, families holding $877 million in unpaid terrorism judgments against the DPRK, argue the stolen-then-recovered crypto constitutes North Korean property subject to seizure under the Foreign Sovereign Immunities Act and the Terrorism Risk Insurance Act.
This case does not exist in a vacuum. It follows the CFTC's June 2023 default judgment against Ooki DAO — the first court ruling to declare a DAO a legal person subject to enforcement — and the November 2024 Lido DAO ruling in California, where Judge Vince Chhabria held that DAO governance token holders can be treated as general partners with joint and several liability. Together, these three cases are constructing a legal architecture that treats decentralized protocols not as neutral software but as identifiable entities with obligations, property interests, and exposure to court orders.
The economic implications are material. According to DefiLlama, total value locked across DeFi protocols exceeded $120 billion as of May 2026. Every dollar of that TVL now sits in smart contracts whose governance structures are being tested, for the first time, against property law, sanctions enforcement, and partnership liability doctrines developed for traditional business entities.
On May 1, 2026, law firm Gerstein Harrow LLP served a New York restraining notice on Arbitrum DAO, blocking the release of 30,766 ETH ($71.1 million) that Arbitrum's Security Council had frozen on April 20 following the Kelp DAO bridge exploit. The funds were slated for transfer to "DeFi United," a recovery coalition managed by Aave, Kelp DAO, and security firm Certora, which had assembled $311 million in commitments from contributors including Consensys (30,000 ETH), Mantle (30,000 ETH), Stani Kulechov (5,000 ETH personal pledge), and LayerZero (10,000 ETH).
The plaintiffs represent three families holding unpaid terrorism judgments against North Korea totaling over $877 million, excluding interest. The judgments date from 2010-2016. Their legal theory: because the Kelp DAO exploit is attributed to North Korea's Lazarus Group, the recovered ETH constitutes DPRK property subject to seizure under existing federal judgments.
On May 4, Aave LLC, represented by Morrison Cohen LLP, filed a 29-page emergency memorandum before Judge Margaret M. Garnett asking the court to vacate the restraining notice. Aave's core argument: OFAC sanctions block transactions involving designated entities but do not convert stolen property into state property subject to private judgment execution. The recovered ETH, Aave contends, belongs to "completely blameless third parties" — depositors whose funds were drained by the exploit. Aave also requested that if the freeze continues, the court require the plaintiffs to post a $300 million bond.
The Arbitrum DAO governance vote on releasing the funds had reached 99% approval (16.9 million ARB in favor, zero opposed) before the restraining notice halted the process. Attorney Gabriel Shapiro reviewed the filing and stated that Arbitrum DAO is "supposed to actually litigate that, not just decide on their own what to do with it," underscoring that the governance decision is now subject to judicial proceedings.
The case's central question — does stolen cryptocurrency briefly held by a state-sponsored hacker become that state's property for purposes of judgment execution — has no direct precedent.
The foundational case for DAO legal liability was decided on June 8, 2023, when Judge William Orrick of the Northern District of California granted the CFTC a default judgment against Ooki DAO. The ruling established that a DAO can be a "person" under the Commodity Exchange Act (CEA), classifying Ooki DAO as an unincorporated association under California law.
The penalties were specific: $643,542 in civil monetary fines, permanent trading and registration bans, and an order requiring any third-party hosting or domain registration provider to shut down the DAO's website and remove its content from the internet. The CFTC's original enforcement action, filed September 22, 2022, charged bZeroX LLC and its founders alongside Ooki DAO for illegally offering leveraged retail commodity transactions and failing to comply with Bank Secrecy Act requirements.
Two aspects of the Ooki ruling remain underappreciated. First, it was a default judgment — Ooki DAO did not appear or defend itself, limiting the precedential value in contested proceedings. Second, because unincorporated associations generally do not provide limited liability to members, the ruling left open whether the CFTC could pursue individual token holders to satisfy the judgment. As of May 2026, no such individual enforcement has materialized, but the legal pathway exists.
According to Ian McGinley, then-CFTC Division of Enforcement Director, the case confirmed that "there is no DAO exemption from the law." This framing — that organizational novelty does not confer regulatory immunity — has become the baseline for subsequent proceedings.
On November 18, 2024, Judge Vince Chhabria of the Northern District of California ruled that Lido DAO could be classified as a general partnership, potentially exposing governance token holders to joint and several liability for the organization's actions. The plaintiff, Andrew Samuels, alleged that LDO tokens were unregistered securities and that Lido DAO failed to register them with the SEC.
The ruling's reach extended beyond Lido itself. Judge Chhabria wrote that the case "presents several new and important questions about the ability of people in the crypto world to inoculate themselves from liability by creating novel legal arrangements to profit from exotic financial instruments." Major venture firms — Paradigm Operations, Andreessen Horowitz (a16z), and Dragonfly Digital Management — were implicated as general partners based on their alleged active participation in Lido governance.
Andreessen Horowitz general counsel Miles Jennings responded that "under the ruling, any DAO participation (even posting in a forum) could be sufficient to hold DAO members liable for the actions of other members under general partnership laws." Robot Ventures, another Lido investor, was dismissed from the case due to insufficient allegations of active participation — establishing that the degree of governance activity, not mere token ownership, determines partnership status.
This creates a paradox for DeFi governance. Active participation in protocol governance — voting on proposals, posting in forums, delegating tokens — is the mechanism by which decentralized systems function. The Lido ruling suggests this same participation can constitute a legal partnership, with all attendant liability.
The three cases attack DAO immunity from different angles but converge on a single conclusion: decentralized organization is not a legal shield.
| Case | Jurisdiction | Core Question | Liability Theory | Status (May 2026) | |------|-------------|---------------|-----------------|-------------------| | CFTC v. Ooki DAO | N.D. California | Can a DAO be sued as an entity? | Unincorporated association | Default judgment (June 2023) | | Samuels v. Lido DAO | N.D. California | Are token holders personally liable? | General partnership | Motion to dismiss denied (Nov 2024) | | Aave v. Gerstein Harrow | S.D. New York | Can third parties seize DAO-held assets? | Property seizure / FSIA / TRIA | Emergency motion pending (May 2026) |
Ooki established that DAOs are legal persons subject to regulatory enforcement. Lido extended liability to individual governance participants. Aave/Arbitrum tests whether assets held in DAO-governed smart contracts are subject to third-party seizure orders — even when the DAO acted as intermediary, not wrongdoer.
The progression follows a recognizable pattern from traditional financial regulation. When a new organizational form emerges, courts first establish jurisdiction (Ooki), then define participant liability (Lido), then determine property rights and creditor access (Aave/Arbitrum). This is the same sequence that partnership law, corporate law, and trust law followed over centuries, now compressed into three years.
Gerstein Harrow LLP appears in multiple proceedings. The firm previously sued Compound and PoolTogether in 2021-2022 over what Uniswap founder Hayden Adams described as a "$276 loss in a PoolTogether lottery" with claims exceeding $200 million. That PoolTogether case was dismissed in June 2023 for lack of standing. The firm's current involvement in the Arbitrum restraining notice follows the same strategic approach: testing novel legal theories against DeFi protocols.
Wyoming's Decentralized Unincorporated Nonprofit Association (DUNA) statute, passed in March 2024 and effective July 1, 2024, represents the most direct legislative response to the liability gap exposed by these cases. The framework allows DAOs to own property, enter contracts, and gain limited liability protections while prohibiting direct distributions consistent with nonprofit status.
The Uniswap Foundation's August 2025 proposal to establish "DUNI" — a Wyoming DUNA entity for Uniswap governance — is the highest-profile adoption attempt. The proposal allocated $16.5 million in UNI tokens to cover anticipated IRS obligations from prior-year tax exposure, with an expected bill under $10 million. Cowrie, an advisory firm co-founded by David Kerr (who helped draft the Wyoming statute), was designated as DUNI's administrator at $75,000 per year.
If adopted, Uniswap would be the largest decentralized organization to register under the framework. The DUNA structure directly addresses the Lido partnership problem: by providing a recognized legal wrapper, it limits member liability and creates a defined entity that can respond to legal process rather than leaving governance participants exposed as general partners.
However, the DUNA framework does not resolve the Aave/Arbitrum property question. A registered DUNA holding frozen exploit proceeds would still face the same seizure claims. Legal registration clarifies who receives court orders but does not determine whether assets held by a protocol are subject to third-party creditor claims.
The practical consequences of these rulings extend to protocol treasury management and governance participation rates. If DAO governance activity creates partnership liability (Lido), rational token holders will reduce participation — degrading the decentralized governance that gives these protocols their regulatory distinction from traditional financial intermediaries.
Data from Messari shows that median DAO governance participation rates already hover between 2-5% of circulating token supply across major protocols. Legal exposure that penalizes active voters could push participation further toward a small group of well-resourced delegates, concentrating governance power and further undermining claims of decentralization.
The Aave/Arbitrum case introduces a separate concern: whether DAO treasuries and protocol-controlled assets are exposed to seizure by any judgment creditor who can plausibly connect frozen funds to a sanctioned entity. DeFi protocols routinely freeze, quarantine, or blacklist addresses linked to exploits. If every such action creates a custodial relationship that subjects the protocol to third-party creditor claims, protocols face a perverse incentive to avoid freezing stolen funds altogether — undermining the asset recovery capabilities that the industry has spent years developing.
The DeFi United coalition's $311 million recovery effort for the Kelp DAO exploit demonstrates that coordinated crisis response in decentralized systems is possible. The Gerstein Harrow restraining notice demonstrates that such coordination also creates legal exposure. Future exploit response efforts will factor in this precedent.
The legal architecture for DAO liability is no longer theoretical. Three federal courts have each established a different dimension of the framework: entity personhood (Ooki), participant liability (Lido), and asset seizure jurisdiction (Aave/Arbitrum). The combined effect is that DAOs operating without legal wrappers face regulatory enforcement as entities, personal liability for their governance participants, and potential asset seizure by third-party creditors.
The $71.1 million frozen in the Arbitrum case is a rounding error relative to the $120 billion in total DeFi TVL. The precedent is not. If the Southern District of New York holds that stolen-then-recovered crypto constitutes property of the thief's sovereign sponsor, every future exploit recovery operation must account for the possibility that recovered funds will be claimed by unrelated creditors. The incentive to freeze and recover stolen assets — the primary mechanism by which DeFi has improved its security posture — weakens.
The industry's response has bifurcated. Well-resourced protocols are pursuing legal registration (Uniswap's DUNA, Aave's existing LLC structure). Smaller DAOs and governance-minimized protocols continue to operate without legal wrappers. The gap between these two approaches will widen as courts continue to treat unincorporated DAOs as partnerships whose participants bear unlimited personal liability.
Judge Garnett's ruling on the Aave emergency motion will likely arrive within weeks. Whatever the outcome, the case confirms that decentralized governance and U.S. federal jurisdiction are no longer separate domains.