$71 million is sitting frozen on Arbitrum right now, and Aave wants it back. The lending protocol filed a memorandum in a New York federal court on May 4, demanding the release of roughly 30,766 ETH locked up after the Kelp DAO rsETH exploit, and the legal argument at the center of it is one of the more unusual collisions web3 has produced in a while.
How a bridge hack turned into a federal case
The trouble started in April when attackers found a way to exploit the system that moves tokens between blockchains. They minted fake rsETH, the liquid staking token from Kelp DAO, and used it as collateral to borrow roughly $290 million from Aave. The fallout was immediate: users rushed to withdraw funds, lending pools maxed out, and billions left the platform in a short window. Some depositors simply could not access their money.
Arbitrum's Security Council responded by freezing about 30,766 ETH linked to the exploit, placing those funds under governance control. That freeze is now the subject of a federal legal battle.
Here's the thing: the people pushing to keep those funds locked are not trying to return them to Aave users. They are creditors holding unpaid judgments against North Korea.
The North Korea angle that complicates everything
The plaintiffs in the case argue that the attacker behind the Kelp DAO exploit was linked to North Korea's Lazarus Group, a state-sponsored hacking outfit that has been connected to multiple large-scale crypto thefts. Blockchain analytics firm LayerZero publicly pointed to Lazarus Group shortly after the attack. On that basis, the plaintiffs claim the frozen ETH qualifies as North Korean property, which they can seize to satisfy long-standing legal judgments against the country.
Aave's legal team pushed back hard. The filing states plainly that the frozen assets belong to ordinary protocol users who have no connection to North Korea, no involvement in the hack, and no reason to be caught in the middle of a decades-old geopolitical dispute.
Aave's filing asks the court to either lift the freeze immediately or require plaintiffs to post a bond of at least $300 million if the freeze stays in place.
The filing does not dispute that the plaintiffs' grievances against North Korea may be legitimate. The argument is that those grievances cannot be resolved by seizing assets that belong to blameless third parties.
DeFi United and the $300 million recovery push
While the legal fight plays out, the broader web3 community did not wait around. Aave, alongside Consensys, Lido, Compound, and the Avalanche Foundation, launched a coordinated recovery effort called DeFi United. According to reporting on the case, the coalition raised more than $300 million to restore the value of rsETH and cover losses from the exploit.
That context matters a lot for understanding why Aave is fighting the freeze so aggressively. The whole point of the recovery effort was to make affected users whole. Diverting the frozen ETH to satisfy unrelated North Korea judgments would directly undermine that goal, and Aave's filing says exactly that.
"The objective of the Restraining Notice against Arbitrum DAO is not to aid in the global recovery efforts to help the Aave Protocol victims," attorneys for the plaintiffs wrote in their own filing. Aave's team used that admission as evidence that the freeze is actively harmful.
Whether Arbitrum DAO can even be sued
There is a secondary legal question buried in this case that could end up being just as significant. Aave's memorandum challenges whether Arbitrum DAO can be treated as a legal entity for the purposes of the plaintiffs' restraining notice. DAOs do not fit neatly into existing legal categories, and Aave argues the plaintiffs did not properly serve Arbitrum DAO as a formal organization.
If the court agrees, it could invalidate the freeze on procedural grounds before the North Korea argument even gets decided. That would be a significant win for the DeFi recovery effort, and a potentially important precedent for how courts treat decentralized governance structures going forward.
What this means for DeFi recovery efforts
The outcome here matters well beyond Aave and Kelp DAO. What most players miss is that this case essentially asks whether a third-party creditor can intercept funds mid-recovery after a hack, before those funds reach the people who actually lost money. The answer a federal court gives will shape how future DeFi exploits get handled legally.
Aave's argument is that recovery funds must flow back to affected users first. The plaintiffs' position is that any assets tied to a sanctioned actor are fair game, regardless of where they end up or who gets hurt in the process.
For anyone following the DeFi space, this is the kind of case worth tracking closely. You can find more web3 and gaming coverage in our latest gaming news section, and for a deeper read on the legal filings and the creditors' position, the full breakdown from Cryptopolitan covers how Aave is framing the freeze as an active obstacle to user recovery. The next court date will determine whether those 30,766 ETH finally move in the right direction.
