Arbitrum DAO voted Friday to release $71 million in frozen ETH recovered from an April 18 rsETH exploit, but the decision now faces a direct legal challenge from attorneys representing families with $877 million in unpaid terrorism judgments against North Korea. The on-chain vote passed with over 90% delegate support, triggering an 8-day Constitutional delay before the funds transfer to an industry recovery effort led by Aave. Simultaneously, lawyers in Manhattan federal court have filed a restraining notice claiming the frozen assets constitute North Korean property subject to seizure.
The Exploit and the Freeze
On April 18, attackers exploited KelpDAO’s rsETH token by using unbacked collateral to borrow approximately $230 million in ETH from Aave. The Lazarus Group has been attributed to the attack. Arbitrum’s Security Council recovered 30,765 ETH and froze the assets to prevent further damage. The DAO’s vote Friday authorizes release of those funds to a recovery effort involving Aave, LayerZero, EtherFi, and Compound. Linda Jeng, Aave Labs Chief Legal and Policy Officer, framed the recovery in broader terms: “In the financial crisis, we had to bail out the banks. Here, we came together as an ecosystem to bail ourselves out.”
Court Battle Over Asset Ownership
Charles Gerstein, attorney representing terrorism judgment holders, served a restraining notice on Arbitrum DAO last week, arguing the frozen ETH belongs to North Korea under U.S. law. Gerstein claims the April 18 incident was fraud rather than theft, meaning attackers obtained legal title to the funds. Aave filed to vacate the restraining notice earlier this week, countering that the assets belong to innocent users harmed by the exploit. The Manhattan federal court has not yet ruled. The 8-day delay built into Arbitrum’s governance structure provides a window for judicial intervention before execution.
DeFi Stability Against Judgment Enforcement
Aave warned in court filings of “cascading liquidations” if the recovery is delayed further, signaling that prolonged freezes threaten broader DeFi stability. The legal dispute exposes a structural tension: decentralized governance votes execute on-chain timelines, while federal court orders operate on separate jurisdictional grounds. Gerstein’s position treats the exploit as a property transfer dispute; Aave treats it as theft recovery. No statement from Arbitrum Foundation or the Security Council has detailed the indemnification protections extended to Offchain Labs and the Arbitrum Foundation in connection with the recovery effort.
Next Steps and Unresolved Variables
The transfer cannot execute for at least 8 days under Arbitrum’s Constitutional AIP requirement. During that window, the Manhattan court could issue a preliminary injunction blocking the release. If the court does not intervene, Aave and its recovery partners will receive the funds. If it does, the case moves into discovery over whether frozen assets constitute North Korean property or belong to innocent parties. The outcome will test whether federal court jurisdiction can halt decentralized governance execution.
