A Manhattan federal judge on May 9 cleared Aave to recover approximately 30,765 ETH — valued at roughly $71 million — frozen on Arbitrum since April's $292 million KelpDAO bridge exploit. Judge Margaret Garnett's two-page order in the Southern District of New York modified a prior restraining not...
"Here, we came together as an ecosystem to bail ourselves out." — Linda Jeng, Chief Legal Officer, Aave Labs
A Manhattan federal judge on May 9 cleared Aave to recover approximately 30,765 ETH — valued at roughly $71 million — frozen on Arbitrum since April's $292 million KelpDAO bridge exploit. Judge Margaret Garnett's two-page order in the Southern District of New York modified a prior restraining notice to permit an onchain governance transfer while preserving the legal claims of terrorism victims holding $877 million in unpaid judgments against North Korea.
The ruling is the first U.S. court decision to directly adjudicate competing claims over exploit-recovered cryptocurrency between DeFi protocol users and sovereign terrorism creditors. It establishes a narrow but significant procedural precedent: recovered crypto can move through DAO governance mechanisms even when subject to a restraining order, provided the freeze "travels with the assets" to the receiving entity.
The case sits at the intersection of three unresolved legal questions — whether stolen crypto constitutes the thief's property under the Terrorism Risk Insurance Act, whether DAOs can be served with restraining notices as legal entities, and whether coordinated DeFi recovery efforts create fiduciary obligations that courts will protect.
On April 18, 2026, at 17:35 UTC, an attacker exploited Kelp DAO's LayerZero V2 Unichain-to-Ethereum rsETH bridge, which was configured as a single-validator (1-of-1 DVN) setup. The attacker forged cross-chain messages to mint 116,500 unbacked rsETH tokens — approximately 18% of the token's circulating supply.
The exploit's second phase targeted Aave directly. The attacker deposited nearly 90,000 rsETH as collateral across Aave's Ethereum and Arbitrum deployments, borrowing roughly $190 million in ETH and other assets. This left Aave holding approximately 107,000 impaired rsETH tokens across eight affected positions on Aave V3's Ethereum Core and Arbitrum markets.
The market response was severe. According to CoinDesk, Aave lost $8.45 billion in deposits over 48 hours, triggering a broader $13.21 billion decline in total value locked across DeFi. A $300 million borrowing spike signaled acute liquidity strain. Stablecoin utilization rates on Aave hit 100%, meaning depositors could not withdraw funds.
The exploit has been widely attributed to North Korea's Lazarus Group, although Aave's court filings dispute this, calling the attribution "conjecture based on unverified reports."
The "DeFi United" initiative, led by Aave service providers, launched within days of the exploit. By April 27, the effort had crossed its relief threshold, raising approximately $303 million (132,650 ETH at ~$2,300 per ETH) from a coalition of protocols and individual contributors.
Major contributors included:
The recovery mechanism involves converting committed ETH into rsETH in tranches, then transferring the tokens to the affected lockbox contract to restore the bridge's 1:1 backing ratio. The process is deliberately staged because new security measures on LayerZero and Kelp DAO remain "in production" and have not been battle-tested, according to the DeFi United coordination group.
On May 6, liquidators closed the attacker's eight positions across Aave V3, burning the liquidated rsETH. This cleared the path for the final recovery phase: moving the 30,765 ETH frozen on Arbitrum to an Aave-controlled wallet.
Kulechov stated publicly: "Aave is my life's work and we're working nonstop to find the best possible outcome for users. I'm working to see this resolved and market conditions normalized as soon as possible."
Justin Sun's $20 million USDT injection reduced Aave's stablecoin utilization rates from 100% to approximately 92%, providing partial withdrawal liquidity during the acute crisis period.
On May 1, 2026, attorney Charles Gerstein, representing families holding three unpaid terrorism judgments against North Korea totaling more than $877 million (excluding interest), served a restraining notice on Arbitrum DAO. The notice barred the DAO from moving the 30,765 ETH.
The legal basis: the Foreign Sovereign Immunities Act (FSIA) and the Terrorism Risk Insurance Act (TRIA), which permit creditors to attach assets tied to state sponsors of terrorism. The plaintiffs' theory holds that because the KelpDAO exploit is attributed to Lazarus Group, the recovered ETH constitutes North Korean state property subject to seizure against decades-old terrorism judgments.
Gerstein's filings advanced a specific legal distinction: the attack was fraud, not theft. Under this theory, the attackers obtained legal title to the rsETH through deception (forging bridge messages), meaning the assets became North Korean property at the moment of acquisition — and remain so even after being frozen and earmarked for victim recovery.
Aave LLC filed an emergency motion on May 5 in the Southern District of New York to vacate or suspend the restraining notice. Aave's core argument: the restrained ETH "belong[s] to completely blameless third parties," not North Korea. The filing stated that "even if a thief briefly held the assets, that does not confer legal ownership" and characterized the opposing theory as "flatly wrong."
Aave also warned that keeping the funds frozen "increases the likelihood of cascading liquidations, sustained liquidity outflows, and irreversible changes to user positions."
Judge Margaret Garnett issued a two-page order on Friday, May 9, that threaded a narrow procedural path. She neither vacated nor upheld the restraining notice in full. Instead, she modified it.
The order permits Arbitrum's Security Council to transfer the 30,765 ETH to an Aave LLC-controlled wallet address via onchain governance vote. It explicitly shields anyone who "initiates, votes on, or participates in the transfer" from liability under the restraining notice.
The restraining notice, however, travels with the assets. Upon transfer to Aave LLC, the freeze attaches to the receiving entity, preserving terrorism creditors' legal claims against the ETH. The underlying property dispute remains unresolved.
This structure allows the DeFi recovery process to proceed while keeping the courthouse doors open for the terrorism plaintiffs. It is, in effect, a supervised custody transfer — the assets change wallets but do not change legal status.
Prior to the court ruling, Arbitrum delegates conducted a non-binding Snapshot temperature check (Phase One) that closed on May 8 with more than 90% approval for releasing the frozen ETH to DeFi United.
The proposal included indemnification language covering the Arbitrum Foundation, Offchain Labs, Security Council members, and governance delegates — contingent on successful passage of a formal binding Constitutional Arbitrum Improvement Protocol (AIP) vote.
A binding onchain AIP vote is still required. If approved, the transfer faces a minimum 8-day Layer 2-to-Layer 1 withdrawal period before the ETH reaches Aave's Ethereum mainnet wallet.
The recovery involves five protocols operating as counterparties: Aave, KelpDAO, LayerZero, EtherFi, and Compound. Their coordination represents the largest organized multi-protocol recovery effort in DeFi history, according to data from the DeFi United Tracker.
The case raises a question U.S. courts have not previously addressed in the crypto context: when stolen-then-recovered digital assets are traceable to both immediate exploit victims and a sanctioned state sponsor with prior unsatisfied judgments, which set of creditors has the superior claim.
The terrorism creditors' fraud theory — that the attacker obtained title through deception rather than simple theft — carries significant implications. If courts adopt this framework, any exploit attributable to a sanctioned state actor could expose recovered funds to seizure by prior judgment creditors, regardless of whether those funds originated from the claimants' losses.
Aave's counter-position rests on basic property law: a thief does not acquire ownership of stolen property. The protocol argues that the ETH was stolen from Aave users, briefly controlled by the attacker, then intercepted and frozen. At no point did the attacker hold legitimate title.
A related case is proceeding in parallel. In January 2026, the same group of terrorism creditors filed suit against Railgun DAO and Digital Currency Group, alleging they facilitated movement of DPRK-controlled funds. A default motion was filed in March. The outcome of these parallel proceedings may shape how courts treat DeFi protocols as entities subject to asset attachment.
The economic logic of DeFi United depends on speed. Protocols must coordinate fund-raising, governance votes, bridge repairs, and asset transfers before liquidation cascades make losses permanent. The terrorism creditors' restraining notice introduced a three-week delay into a process designed to operate in days.
If courts routinely allow third-party creditors to freeze exploit-recovered assets, the incentive structure for future rescue efforts shifts. Contributors to recovery pools face the risk that their funds become subject to attachment by parties with no connection to the exploited protocol. This could reduce willingness to participate in coordinated bailouts.
The DeFi United coalition raised $303 million from voluntary contributors on the assumption that funds would flow to affected users. Introducing external claimants into the distribution creates a prisoner's dilemma: rational actors may decline to contribute if they cannot guarantee their funds reach intended beneficiaries.
Judge Garnett's modified-freeze approach offers a temporary solution but not a permanent framework. The restraining notice follows the assets to Aave LLC, meaning the property dispute will eventually require full adjudication — likely through summary judgment or trial.
For DAOs, the case confirms that restraining notices can be served on decentralized governance structures. Arbitrum DAO was treated as a legal entity capable of holding and transferring property, regardless of its decentralized governance model. This has implications for any DAO holding significant assets that may be traceable to sanctioned entities.
The Aave-Arbitrum case marks the first direct collision between DeFi's self-rescue mechanisms and the U.S. terrorism-victims compensation framework. Judge Garnett's order is procedurally narrow — it permits a transfer, not a resolution. The underlying question of whether exploit-recovered crypto constitutes the attacker's property for purposes of terrorism judgment enforcement remains open.
The $303 million DeFi United effort demonstrates that the industry can coordinate rapid-response bailouts at scale. Whether that capacity survives contact with the U.S. legal system depends on how courts ultimately resolve the property rights question at the center of this case. The next phase — a binding Arbitrum governance vote followed by an 8-day withdrawal — will test whether onchain coordination can operate within the constraints courts impose.
The terrorism creditors hold $877 million in unsatisfied judgments. The frozen ETH represents $71 million. Even if the creditors prevail, the recovery addresses less than 10% of their claims. For Aave's users, however, the $71 million represents the final component of a $303 million rescue package designed to make them whole after the largest DeFi exploit of 2026.