Court Lets Arbitrum DAO Transfer $71M ETH to Aave After North Korea Hack
DeFi

Court Lets Arbitrum DAO Transfer $71M ETH to Aave After North Korea Hack

May 9, 20263 min read

A Manhattan federal judge allowed Arbitrum DAO to move $71 million in frozen Ether to Aave, clearing the way for the DeFi protocol's recovery plan after the April rsETH exploit linked to North Korea. The legal claim of terrorism victims' families on those funds stays alive, which leaves Aave facing ongoing legal exposure even if the transfer goes through.

What the Court Ordered and Why DeFi Is Watching

Judge Margaret Garnett of the Southern District of New York signed the order on Friday, May 8. It modifies a restraining notice that had locked the assets inside Arbitrum DAO. The modification allows an onchain governance vote to send the funds to a wallet controlled by Aave LLC.

The order also protects anyone who takes part in the transfer. Governance participants will not be treated as violating the freeze. That removes a key legal risk for Arbitrum delegates who might have avoided voting out of concern for personal liability.

For Ethereum and the broader DeFi space, the ruling sets a meaningful precedent. The central question was whether a hack victim can legally claim stolen assets once they land in a DeFi protocol. The court confirmed that a thief does not gain lawful title to stolen property, even in a decentralized setting.

The rsETH Shortfall: How Big Is the Problem

The Kelp DAO exploit happened on April 18 and was attributed to North Korea-linked hackers. The attack released 116,500 rsETH on Ethereum without a corresponding burn on the source side. That left only 40,373 rsETH in the adapter contract against confirmed backing for 152,577 tokens. The gap of roughly 76,127 rsETH is worth around $174.5 million at current prices.

The 30,765 ETH frozen by Arbitrum, now valued at $71 million, covers a significant portion of that gap. Supporters of the transfer argue that even partial restoration of rsETH's backing would stabilize conditions for users across Arbitrum and the wider restaking ecosystem.

Impact: The $71 million ETH transfer could close roughly 40% of the rsETH shortfall from the April exploit. Restoring backing directly affects liquidity and confidence in restaking protocols.

Terrorism Victims' Claims and What They Mean for Aave

The court's ruling did not close the case. Law firm Gerstein Harrow LLP represents families holding $877 million in unpaid terrorism judgments against North Korea. They claim the funds belong to their clients because North Korean hackers stole them.

The court kept that claim active. Aave cannot use the transferred funds freely. If the court eventually rules in favor of the terrorism claimants, Aave would be required to hand the money over. That risk sits over the protocol regardless of whether the onchain vote passes.

Aave pushed back hard against the restraining notice, filing an emergency motion in New York court last week. The protocol warned that if the freeze held, it would hand bad actors a playbook: hack a DeFi protocol, then use legal uncertainty to block any recovery effort while victims wait.

Market Reaction and the State of Aave

After the ruling was announced, AAVE traded around $95.75, up more than 3% in 24 hours. The market read the decision as confirmation that Aave's legal position was sound and that the recovery path remained open.

For context: in the days after the April Kelp exploit, outflows from Aave exceeded $6.2 billion. AAVE dropped 13% in a single week. The court's signal now helps restore some confidence in the protocol and in the restaking sector.

Gerstein Harrow has filed similar claims before. In January, the firm sued Railgun DAO, arguing the privacy protocol was used to launder funds from the $1.5 billion Bybit exploit. The pattern is consistent: the firm pursues North Korea-linked theft claims through DeFi governance processes.

What Comes Next: The Vote and the Remaining Risk

The actual transfer has not happened yet. The court order only permits an onchain governance vote in Arbitrum DAO. Delegates must vote separately, and only after that will the assets move to the Aave LLC wallet.

The case raises a question that will matter for years: in DeFi, which takes priority, fast recovery for hack victims or third-party legal claims on the same assets? The court is currently allowing recovery while keeping both claims open. For those who hold restaking positions or keep funds in DeFi protocols, this uncertainty is worth tracking. Some moved capital to USDT and stablecoins during the April panic.

If Arbitrum DAO votes to transfer and the court later rules for the terrorism claimants, Aave would need to return $71 million from its own reserves. For a protocol with tens of billions in TVL, that is a manageable exposure but not one that disappears on its own.

Share:

Comments

Your email address will not be published. Required fields are marked *

or verify by email