CoinDesk
Lawyers for victims of three North Korea terrorism cases filed a 30-page opposition brief in the Southern District of New York on Tuesday, reframing the April 18 rsETH exploit on Aave as fraud rather than theft — a legal pivot that could give the attackers defensible title to the borrowed ether and, in turn, let the victims attach it under the Terrorism Risk Insurance Act.
Why it matters
The April exploit drained roughly $230 million from Aave, the largest decentralized lending protocol by total value locked. An attacker attributed by Chainalysis and TRM Labs to North Korea's Lazarus Group minted unbacked rsETH tokens, used them as collateral, and borrowed real ether against worthless deposits before Arbitrum developers intercepted about $71 million of the proceeds.
The new filing leans on a doctrine most associated with Charles Ponzi: a fraud victim passes title, not merely possession, to a fraudster, even if that ownership is later reversible. If a Manhattan federal judge accepts the theory, Aave's earlier New York property-law arguments weaken — and the frozen ether becomes reachable as property of a state sponsor of terrorism, the only pathway TRIA actually unlocks.
Market impact
The brief also presses Aave on standing, pointing to its own terms of service stating the protocol has no "possession, custody or control" over user assets — a position Aave has used to disclaim liability in user disputes for years. Meanwhile, DeFi United, an industry-led recovery fund Aave itself sits on, has raised $327.95 million — more than four times the $71 million at stake — meaning the disputed ether may be largely redundant to affected users even if the freeze holds. A hearing is set for May 6 in Manhattan federal court.
Frequently asked questions
-
Why are lawyers calling the Aave exploit fraud instead of theft?
Under a long-standing U.S. doctrine, a fraud victim passes title to a fraudster — even if that ownership is reversible. The new filing argues the Lazarus Group's rsETH scheme was a fraudulent lending transaction, which is what lets the victims reach the frozen ether through the Terrorism Risk Insurance Act.
-
How much ether is actually in dispute?
About $71 million of the roughly $230 million drained from Aave on April 18 was intercepted by Arbitrum developers before it could be cashed out. That $71 million is the portion the victims are trying to attach; the rest remains unaccounted for.
-
Could Aave's own terms of service hurt it in court?
The filing argues Aave may lack standing to challenge the freeze, citing its own terms stating the protocol has no "possession, custody or control" over user assets — a disclaimer Aave has historically used to avoid liability.
-
Does the recovery fund change anything for victims?
DeFi United, the industry-led recovery fund Aave itself sits on, has raised $327.95 million as of Tuesday — more than four times the $71 million at stake. The brief notes affected users may not need the frozen ether at all even if the freeze holds.
-
When is the next court date?
A hearing is scheduled for Wednesday, May 6, in the Southern District of New York in Manhattan.
CryptoSlate
CoinTelegraph
TheBlock
Crypto News
WuBlockchain