Aave faces $71M ETH court fight
- Aave asked a New York federal court to lift a freeze on 30,766 ETH after North Korea judgment creditors moved to seize the recovered funds. - The ether came from April’s Kelp DAO rsETH exploit, and Aave says the stash belongs to affected users — not Lazarus or DPRK creditors. - The fight could decide whether hacked DeFi funds can be rerouted by courts before protocol-led recoveries finish.
A DeFi recovery effort just ran into a very old kind of problem — competing claims in court. Aave is trying to unblock about 30,766 ETH, worth roughly $71 million, that Arbitrum froze after the April 18 Kelp DAO exploit. But a group of plaintiffs with unpaid terrorism judgments against North Korea wants that same ETH held in place and potentially seized. That turns a hack recovery into a property fight. ### What exactly happened? Aave filed an emergency motion in federal court in New York to vacate a restraining notice that stops Arbitrum DAO from moving the recovered ETH. The notice was served after lawyers for families holding old judgments against North Korea argued the Kelp exploit was carried out by Lazarus, so the frozen crypto should count as property tied to the DPRK. (theblock.co) ### Where did the ETH come from? The stash comes from the Kelp DAO rsETH exploit on April 18. The attacker used a flaw tied to a cross-chain bridge and ended up borrowing around $230 million in ETH from Aave users with bad collateral. On April 20 and 21, Arbitrum’s Security Council traced and froze 30,765.67 to 30,766 ETH linked to the exploiter’s addresses. (theblock.co) ### Why is Aave fighting so hard? Because Aave’s position is simple — stolen funds do not become the thief’s property just because the thief touched them. Aave says the frozen ETH should go back into the recovery process for users hit by the exploit, not to unrelated creditors. In its f(theblock.co) to cover damage if the freeze stays in place. (theblock.co) ### Who are the other claimants? They are not Kelp victims. They are families and other plaintiffs holding three older U.S. judgments against North Korea tied to terrorism cases, with combined face value above $877 million before extra interest. Their theory is that if Lazarus carried out the exploit for North Korea, then the frozen ETH can be attached to satisfy those judgments. (theblock.co) ### Why does Lazarus matter so much here? Because the whole seizure theory depends on attribution. LayerZero linked the exploit to Lazarus, and the plaintiffs are leaning on that. Aave is pushing back, saying the attribution is not proven enough to let outsi(theblock.co)egal rights flow from that. (theblock.co) ### What was supposed to happen before the court stepped in? The plan was to send the recovered ETH into “DeFi United,” a cross-protocol recovery effort meant to restore rsETH backing and help make users whole. Aave Labs, Kelp DAO, LayerZero, EtherFi, and Co(theblock.co) frozen ETH was one of the first big chunks actually recovered from the exploit path. (theblock.co) ### Why does this matter beyond Aave? Because it tests whether onchain recovery can be interrupted by offchain creditors before victims are repaid. If courts treat recovered hack proceeds as attachable assets of the hacker’s sponsor, DeFi protocols may face a n(theblock.co)lly controls “recovered” crypto in a crisis. (theblock.co) ### Bottom line? This is not just a $71 million fight over ETH. It is a fight over whether recovered crypto belongs first to the people it was taken from, or whether a court can reroute it to satisfy older claims once a state-linked hacker enters the story. The answer could reshape how DeFi recoveries get built from here. (theblock.co)
