TheBlock
Aave LLC filed an emergency motion in federal court asking a judge to vacate a May 1 order that froze roughly $73 million in ether recovered from the April 18 Kelp DAO exploit. The freeze blocks Arbitrum DAO from moving the funds while plaintiffs holding years-old terrorism judgments against North Korea seek to claim the ether as restitution.
Aave's central argument is that the claims rest on unproven attribution linking the exploit to the North Korean hacking outfit Lazarus Group, and that even under that theory, temporary possession of stolen assets does not create ownership. Founder Stani Kulechov framed it plainly in a statement: "A thief does not own what he steals. These funds belong to the affected users they were stolen from — full stop." The filing adds that the immobilized ether is "funds that were taken from Aave Protocol users, not assets owned by any alleged wrongdoer."
Why it matters
The exploit saw a bad actor weaponize a flaw in a cross-chain bridge tied to Kelp DAO's rsETH token, using unbacked collateral to borrow around $230 million in ETH from Aave users. Arbitrum later intercepted 30,766 ETH — now worth nearly $73 million — and set it aside for recovery, the first major pool of funds retrieved after the attack. That effort has since expanded into DeFi United, an industry-wide coordination push that has raised more than 137,700 ETH (roughly $327 million), pending release of the frozen ether and additional protocol votes.
The legal question matters well beyond Aave: a ruling that lets the North Korea plaintiffs sweep the recovered funds would set precedent for how DeFi exploits are resolved in US courts, and would likely chill future cross-chain bridges from cooperating with recovery efforts. Aave is asking the court to vacate the restraining order or, alternatively, require the plaintiffs to post a bond of at least $300 million to cover potential damages if the freeze is later found to have been unjustified.
Frequently asked questions
-
What is Aave asking the court to do?
Aave filed an emergency motion asking the court to vacate the May 1 order that froze roughly $73 million in ETH recovered from the Kelp DAO exploit, or alternatively require the North Korea plaintiffs to post a $300 million bond to cover potential damages if the freeze is later found unjustified.
-
Why are North Korea plaintiffs trying to claim the recovered ETH?
They hold years-old terrorism judgments against North Korea and argue the Kelp DAO exploit was carried out by the Lazarus Group, making the recovered ether recoverable as restitution. Aave contests the attribution as unproven speculation.
-
How much ETH was stolen in the Kelp DAO exploit?
The bad actor used a flaw in a cross-chain bridge tied to Kelp DAO's rsETH token to borrow approximately $230 million in ETH from Aave users on April 18. Arbitrum later intercepted 30,766 ETH — now worth nearly $73 million — for recovery.
-
What is DeFi United and how much has it raised?
DeFi United is an industry-wide coordination effort that has raised more than 137,700 ETH, worth approximately $327 million, to backstop victims of the Kelp DAO exploit. Release of the funds is pending the court ruling and additional protocol votes.
-
Why does the case matter beyond Aave?
A ruling that lets the North Korea plaintiffs sweep the recovered ether would set precedent for how DeFi exploits are resolved in US courts and could chill future cross-chain bridges from cooperating with recovery efforts. The $300M bond ask is the structural protection Aave wants for protocol-level recovery…
Crypto News
CryptoSlate
CoinTelegraph
CoinDesk
WuBlockchain