A New York court order froze $71 million in ETH on Arbitrum on May 1, 2026 — not at the request of exploit victims, but of families holding $877 million in unpaid terrorism judgments against North Korea. The restraining notice, served by Gerstein & Harrow LLP on behalf of plaintiffs in decades-ol...
"A thief does not own what he steals." — Aave LLC, Emergency Motion filed in the Southern District of New York, May 2026
A New York court order froze $71 million in ETH on Arbitrum on May 1, 2026 — not at the request of exploit victims, but of families holding $877 million in unpaid terrorism judgments against North Korea. The restraining notice, served by Gerstein & Harrow LLP on behalf of plaintiffs in decades-old litigation against Pyongyang, targets 30,766 ETH that Arbitrum's Security Council had frozen after the April 18 Kelp DAO exploit. Aave LLC responded on May 4 with a 29-page emergency motion, filed by Morrison Cohen LLP before Judge Margaret M. Garnett, demanding the notice be vacated immediately.
The case represents the first time a U.S. court order has intercepted a coordinated DeFi protocol recovery effort mid-execution. It forces a direct collision between decentralized governance mechanisms and traditional property enforcement law, with $71 million in user funds caught in the middle. The outcome will set precedent for whether on-chain assets recovered after an exploit can be treated as the property of the original attacker — and therefore seized by the attacker's creditors.
On April 18, 2026, an attacker exploited a vulnerability in Kelp DAO's LayerZero-powered cross-chain bridge, draining 116,500 rsETH — approximately $292 million — from Kelp DAO's bridge contract on Ethereum mainnet. According to Chainalysis, the attack was attributed to North Korea's Lazarus Group within three days based on mixer usage patterns and fund-dispersal methodology.
The attack vector was specific: Lazarus Group's TraderTraitor subcluster compromised two RPC nodes feeding Kelp DAO's LayerZero relayer, then launched a DDoS attack to force a failover. The poisoned nodes reported fabricated block data showing rsETH being burned on the source chain when no such burn had occurred. LayerZero's Labs DVN, configured as the sole verifier in a 1-of-1 setup, confirmed the fraudulent cross-chain message as valid. On that false confirmation, the Ethereum-side contract released 116,500 rsETH to an attacker-controlled address.
According to LayerZero, it had previously recommended that Kelp DAO adopt a multi-verifier configuration. Kelp DAO has stated the 1-of-1 setup was the default configuration shipped for new deployments at the time of its L2 expansion.
The exploit caused immediate contagion. According to CoinDesk, $13.21 billion in DeFi liquidity fled 20+ protocols within 48 hours. Aave's TVL dropped from $26.4 billion to approximately $20 billion in the days following the attack, a decline of roughly $6.4 billion. The protocol's TVL stood at approximately $15 billion as of early May 2026, according to DefiLlama — still well below pre-exploit levels.
On April 20, two days after the exploit, Arbitrum's Security Council used emergency powers to freeze 30,766 ETH linked to the attacker that had landed on Arbitrum One. The funds were locked in a designated wallet requiring a governance vote to move.
A coalition including Aave Labs, Kelp DAO, LayerZero, EtherFi, and Compound formed "DeFi United," a coordinated recovery effort. The group's mandate: restore rsETH backing and return frozen funds to affected users. According to The Defiant, Aave DAO was asked to commit 25,000 ETH to the effort, with total pledges exceeding $300 million from participants including Consensys, Lido, EtherFi, and Mantle. As of late April, DeFi United had raised approximately $160 million, with Mantle and Aave DAO together contributing 55,000 ETH (approximately $127 million), according to KuCoin reporting.
The original shortfall created by the exploit was approximately 163,183 ETH. Partial recoveries reduced this figure: Kelp froze tokens worth roughly 43,168 ETH, the Arbitrum freeze captured 30,766 ETH, and expected liquidations of the attacker's positions on Aave and Compound were projected to recover an additional 14,168 ETH. The residual funding gap stood at approximately 75,081 ETH.
On May 1, Arbitrum DAO opened a governance vote to release the frozen 30,766 ETH to DeFi United's recovery fund. According to Unchained, the vote was backed by Aave Labs and other coalition members.
Hours later, the restraining notice arrived.
The restraining notice, served on Arbitrum DAO on May 1 by Gerstein & Harrow LLP, was filed on behalf of families holding three unpaid terrorism judgments against the Democratic People's Republic of Korea. The claims total more than $877 million, excluding interest. The judgments date from litigation between 2010 and 2016.
The legal theory: if the Kelp DAO exploit was conducted by North Korea's Lazarus Group (as Chainalysis attributed), then the frozen ETH constitutes property of the DPRK. Under New York law, a restraining notice can be served on any party believed to hold property of a judgment debtor. The families' attorneys argue the frozen funds are seizable assets that can satisfy decades-old terrorism judgments.
The Southern District of New York issued the order, blocking Arbitrum DAO from moving the 30,766 ETH. The governance vote to release funds to DeFi United was effectively halted.
Aave LLC filed an emergency motion on May 4 before Judge Margaret M. Garnett, making three principal arguments according to court filings reviewed by CoinTelegraph, The Block, and The Defiant:
1. The funds are not North Korea's property. Aave's central argument is that a thief does not acquire property rights over stolen goods. The 30,766 ETH was stolen from Aave users and subsequently frozen mid-transit. Aave contends the rightful owners remain the protocol's depositors who lost funds in the exploit. Treating the ETH as the attacker's property would, per the filing, "upend basic property law."
2. The restraining notice targets the wrong entity. Aave argues that Arbitrum DAO is not a debtor of North Korea's judgment creditors. The DAO merely custodies frozen funds in a governance-controlled wallet. Serving a restraining notice on Arbitrum DAO is, per the motion, functionally equivalent to serving one on a bank vault because the bank's building happens to sit in New York.
3. The freeze causes ongoing economic harm. The motion states that maintaining the freeze deepens losses for Aave users and destabilizes DeFi markets already under stress from the original exploit. Aave requests three alternative remedies: immediate vacatur of the restraining notice; an expedited hearing with a temporary vacatur in the interim; or, if the notice is maintained, that plaintiffs post a cash bond of no less than $300 million to cover damages the freeze is causing.
The Aave case does not exist in a legal vacuum. Three prior cases have shaped the emerging framework for DeFi protocol liability:
CFTC v. Ooki DAO (June 2023). A federal court held that Ooki DAO is a "person" under the Commodity Exchange Act. The CFTC's order found that token holders who voted their tokens to affect governance outcomes could be found personally liable for the DAO's violations. According to Proskauer, the CFTC disclaimed enforcement against "absent third parties," but the precedent established that governance participation creates legal exposure.
Samuels v. Lido DAO (November 2024). The U.S. District Court for the Northern District of California ruled that a DAO can be treated as a general partnership under California law. According to Davis Wright Tremaine, the court found that venture capital firms Paradigm, Andreessen Horowitz, and Dragonfly "meaningfully participated" in Lido's governance and could therefore face unlimited liability as general partners. The implication: governance token holders with significant voting power may bear partnership-level liability.
Tornado Cash / OFAC (November 2024 – March 2025). The Fifth Circuit held in November 2024 that OFAC exceeded its statutory authority by sanctioning immutable smart contracts, ruling that autonomous code cannot constitute "property" under the International Emergency Economic Powers Act. OFAC subsequently lifted Tornado Cash sanctions in March 2025. However, the ruling drew a distinction between sanctioning code and prosecuting developers — Tornado Cash developer Roman Storm's criminal trial was scheduled for July 2025.
The Aave case introduces a new variable: whether assets recovered by a protocol after a state-attributed exploit become seizable property of the attacking state's creditors. None of the prior cases addressed this specific question. The property law argument — does a thief's momentary possession create attachable property rights? — is well-established in traditional law but untested in the context of on-chain asset recovery.
The scale of DPRK-attributed crypto theft provides context for the creditors' strategy. According to TRM Labs, North Korean hacking groups accounted for 76% of all crypto hack losses in 2026 through April, driven by two attacks: the Drift Protocol breach on April 1 ($285 million) and the Kelp DAO exploit on April 18 ($292 million).
Cumulative figures are larger. According to BlockEden, Lazarus Group is responsible for at least $6.75 billion in cumulative cryptocurrency theft since 2017. In 2025 alone, DPRK-linked actors stole $2.02 billion — a 51% increase year-over-year — with the $1.5 billion Bybit hack in February 2025 comprising nearly three-quarters of that total, according to The Hacker News.
The terrorism creditors' legal strategy is rational in economic terms: North Korea holds no seizable traditional assets in U.S. jurisdictions, but attributed crypto exploits create identifiable, frozen digital assets that can be located and targeted through restraining notices. If the court accepts that exploit proceeds constitute DPRK property, the precedent would create a replicable mechanism for terrorism creditors to attach funds across any protocol where Lazarus Group assets are frozen.
The case strikes directly at the economic viability of coordinated DeFi recovery. The DeFi United model — where protocols pool capital to restore backing after an exploit — depends on recovered funds being returned to affected users. If courts rule that frozen exploit funds can be redirected to third-party creditors of the attributed attacker, the incentive structure breaks down.
Three economic consequences follow:
Recovery fund participation declines. Protocols contributing to DeFi United committed capital on the assumption that recovered assets would reduce the funding gap. If $71 million in frozen ETH is redirected to terrorism creditors, the residual gap widens from approximately 75,081 ETH to over 106,000 ETH. Future contributors will price this legal risk into participation decisions.
Security Council freeze incentives shift. Arbitrum's Security Council froze the ETH within 48 hours of the exploit — a response widely praised as responsible governance. If freezing assets exposes the freezing entity to restraining notices, future security councils may calculate that not freezing is legally safer than freezing. This perverse incentive would reduce the ecosystem's ability to intercept stolen funds.
Protocol legal costs escalate. Aave retained Morrison Cohen LLP and filed a 29-page emergency motion within days. The $300 million bond request signals the scale of resources protocols must now allocate to legal defense. Smaller protocols without comparable legal budgets would be unable to mount equivalent challenges.
The Southern District of New York now holds the first case that directly tests whether DeFi's emerging recovery infrastructure is compatible with traditional property enforcement. The $71 million in frozen ETH sits at the intersection of three legal frameworks: New York restraining-notice law, federal terrorism-judgment enforcement, and the still-evolving question of who "owns" assets on a blockchain after an exploit.
Aave's property-law argument — that stolen goods do not become the thief's property — has deep roots in common law. But the creditors' argument has its own logic: if Chainalysis attribution holds, and if the Lazarus Group operated on behalf of the DPRK, then the frozen ETH passed through the hands of a judgment debtor with $877 million in outstanding obligations.
The court's ruling will have consequences beyond this case. A decision favoring the creditors would establish that any frozen exploit funds attributed to a sanctioned state actor are subject to third-party claims — effectively converting DeFi security freezes into legal targets. A decision favoring Aave would reinforce that on-chain recovery mechanisms operate under the same property-law protections as traditional asset recovery, where stolen goods revert to their rightful owners.
Either way, the era in which DeFi protocols could treat legal jurisdiction as someone else's problem is over.