Court Allows Arbitrum DAO to Shift $71M North Korea-Linked ETH to Aave

A Manhattan federal judge has cleared a path for Arbitrum DAO to move $71 million worth of frozen Ether to Aave LLC as part of a broader DeFi recovery effort tied to a North Korea–linked exploit. The decision, while a procedural milestone, leaves intact the terrorism victims’ claims on the funds and requires careful navigation between off-chain governance and on-chain formalities before any transfer can be completed.

Judge Margaret Garnett of the Southern District of New York issued the order on Friday, modifying a restraining notice that had locked the assets inside Arbitrum DAO. The modification enables an on-chain governance vote to authorize transferring the funds to a wallet controlled by Aave LLC and explicitly protects participants in the transfer from violating the freeze.

Importantly, the court’s ruling does not grant unfettered access to the money. The terrorism victims’ legal claim remains, meaning Aave could still be forced to hand the funds over if the court ultimately rules in the victims’ favor. The decision thus splits the path between enabling a recovery mechanism and preserving the ongoing litigation that underpins the freeze.

Key takeaways

• The SDNY order allows a transfer of $71 million in frozen ETH from Arbitrum DAO to Aave LLC, by modifying the restraining notice governing the funds.
• An on-chain Arbitrum governance vote is still required to finalize any transfer, with the off-chain Snapshot vote serving as a signaling mechanism for broad support.
• Despite the green light for the transfer process, the court retains the terrorism victims’ claim on the funds, keeping a potential return of the assets on the table depending on future rulings.
• The development sits within the broader context of Aave’s recovery plan after the Kelp DAO exploit, a saga that has dragged on across court actions and DeFi governance debates.
• The Kelp exploit left rsETH backing materially strained, raising questions about how recovery assets affect pegged stablecoins and cross-chain collateral in DeFi ecosystems.

Judicial signal as DeFi recovers a frozen stake

The ruling marks a notable juncture in the ongoing effort to unwind the aftermath of the Kelp DAO event. By permitting a governance-led move of the frozen ETH, the court acknowledges a path for asset recovery that could help compensate victims while preserving the legal framework that attributes liability to the North Korea–linked actors in the case. The decision aligns with a broader trend of courts weighing asset freezes against the practical needs of victims and lenders seeking to salvage value from compromised protocols.

The order references an off-chain governance process that had demonstrated strong support for releasing the funds to support victims and recovery efforts. In particular, Arbitrum delegates engaged in a Snapshot vote that yielded a decisive endorsement for the move, even as a binding on-chain vote remains a prerequisite for actual transfers. For readers tracking governance mechanics, this distinction—off-chain consent versus on-chain execution—remains pivotal to whether the funds can ever leave the Arbitrum DAO treasury.

For context, the on-chain step is essential to authorize the movement of assets under the protocol’s formal governance framework. In parallel, the on-chain vote would bind participants to the outcome, reducing the risk of unilateral action outside the established process. Recent reporting noted the off-chain vote’s strong majority, but emphasized that the transfer would still require a subsequent on-chain vote to take effect. See earlier coverage outlining the off-chain approval trajectory and its implications for Aave’s recovery plan. Arbitrum vote to release $71M in frozen Kelp exploit ETH set to pass

Aave’s legal pivot and the recovery roadmap

Aave’s legal push to lift the restraining notice intensified last week with an emergency motion in New York seeking to vacate the freeze and allow transfers to proceed for victims of the Kelp DAO hack. The filing contends that while North Korea-linked actors are a potential source of attribution, using that as a basis for ownership of stolen property is legally tenuous and could chill future DeFi recovery efforts if upheld.

The motion, described in filings and subsequent reporting, suggests that a broad interpretive frame—one that recognizes theft as not equating to ownership—would be essential to prevent a chilling effect on future sanctioned recoveries across DeFi protocols. The filing underscores a tension between enforcing liability for sanctioned victims and maintaining a flexible, restorative approach that enables protocols to map recoveries in real time. Aave asks court to lift restraining notice on frozen Kelp exploit ether

In related context, the legal narrative includes activity from Gerstein Harrow LLP, representing families holding substantial terrorism judgments and arguing the funds belong to their clients because of the alleged theft during the April 18 attack. The firm previously pursued claims against other DeFi entities tied to North Korea–related hacks, illustrating the broader legal front on how to handle hacked or misappropriated assets when court-ordered freezes intersect with recovery efforts. Aave deposits fall by $15B as Kelp exploit sparks flight from DeFi lender

Kelp exploit and the stubborn rsETH shortfall

The Kelp DAO incident left a notable hole in rsETH backing. The event freed 116,500 rsETH on Ethereum without a corresponding burn on the supply side, leaving 40,373 rsETH backed against 152,577 rsETH in existence, a shortfall of roughly 76,127 rsETH. At current valuations, that gap equates to about $174.5 million. The freeze of 30,765 ETH by Arbitrum represents a meaningful step toward narrowing this gap and restoring confidence in rsETH’s collateral structure, according to proponents who argue that even partial restoration can stabilize conditions for users across Arbitrum and the broader DeFi ecosystem. Joint proposal to release 71m frozen by Arbitrum moves to first vote

The unfolding sequence underscores a broader tension in DeFi: recovering value after a breach while preserving the incentives and governance mechanisms that allow protocols to adapt quickly to post-attack realities. If the current effort—partially funded by escrowed assets—helps restore rsETH’s backing, it could provide a model for coordinated recoveries that other protocols may aspire to in the future.

What to watch next in Arbitrum’s recovery playbook

The immediate next milestone is the on-chain governance vote that would authorize transferring the frozen ETH to Aave’s controlled wallet. If the on-chain vote approves, the funds would move only under the safeguards that the SDNY order imposes and subject to any lasting court determinations about the terrorism claims. Investors and users will be watching not only the vote tally but also how the court handles the ongoing claims, which could shape future DeFi recovery operations and the legal risk calculus for similar rescue efforts.

Beyond the immediate dispute, the case highlights the evolving interface between courts, DeFi governance, and recovery planning. As the industry continues to navigate hacks, sanctions, and attribution debates, observers will look for clearer frameworks that balance remedial action with accountability. The coming weeks should clarify whether the on-chain vote can proceed as envisioned and whether the court will set further boundaries on how recovered assets are allocated during protracted litigation.

For readers following the arc of DeFi recovery, the key variable remains how swiftly the on-chain governance step can be completed and how the court interprets the terrorism-claims overlay on the released funds. The next developments will reveal how flexible enforcement can be in practice when an ecosystem seeks to recover value while honoring legal claims.

In the meantime, market observers will monitor the broader implications for DeFi asset recovery, governance signaling, and cross-protocol cooperation as a template for handling similar incidents in the future.

What to watch next: the on-chain vote outcome and any subsequent court ruling that could influence the fate of the frozen funds and the framework for DeFi-based recoveries.