Aave filed an emergency motion in New York district court Monday to vacate a restraining notice blocking the transfer of 30,766 ETH to victims of the Kelp DAO exploit. The freeze was imposed by law firm Gerstein Harrow LLP, which claims its clients hold default judgments against North Korea and therefore own assets allegedly stolen by North Korean hackers. Aave argues the position is legally baseless and threatens to destabilize the entire DeFi ecosystem by preventing victim compensation.
The North Korea Ownership Claim
Gerstein Harrow served the restraining notice on Arbitrum DAO, the entity holding the frozen ETH earmarked for Kelp victims, based on claimed default judgments totaling $877 million against North Korea. The law firm asserts that because North Korean actors allegedly executed the Kelp hack on April 18, 2026—which drained $292 million—its clients have legal ownership of the stolen assets. Aave’s legal team rejected this reasoning as fundamentally flawed. “A thief doesn’t gain lawful ownership of property by stealing it,” Aave’s lawyers wrote in the emergency motion. The firm’s attribution to North Korea rests on “conjecture from posts on the internet,” according to Aave, with no confirmed link between the hack and the alleged nation-state actor.
Aave’s Legal Challenge and Timing
Aave filed the emergency motion on May 5, 2026, just two days before Arbitrum DAO’s vote on releasing the ETH was set to conclude on May 7. The protocol argues the restraining notice “defies logic, common sense and the law” and creates “irreparable harm” to Aave protocol users. Aave requested that Gerstein Harrow post a $300 million bond to maintain the freeze. No hearing date has been scheduled, leaving the status of the frozen assets uncertain as the Arbitrum DAO vote deadline approaches. The ETH was intended to compensate Kelp victims through DeFi United, an industry coordination effort for recovery efforts.
Precedent and Ecosystem Risk
This dispute echoes prior cases involving frozen hack proceeds, including the Heco Bridge hack and Bybit exploit, both of which raised questions about asset recovery and legal claims. Aave warned that blocking victim compensation poses systemic risk: “If the immobilized assets remain subject to a freeze and are not made available to restore value to Aave protocol users, the entire DeFi ecosystem risks being destabilized.” The case highlights a growing tension between traditional legal frameworks—where default judgments create enforceable claims—and crypto recovery practices, where protocols and DAOs attempt to return stolen funds directly to users.
Next Steps and Unresolved Questions
The outcome hinges on whether the judge grants Aave’s motion to vacate before or after the May 7 voting deadline. If the freeze remains in place, the Arbitrum DAO vote becomes academic. Gerstein Harrow has not publicly responded to Aave’s filing, and no statement has been issued by the firm’s clients or representatives. The case will set precedent for how courts treat default judgments against alleged nation-state actors when applied to blockchain assets.
