TheBlock
Arbitrum DAO voted 90.96% in favor — 182.2 million votes — of releasing 30,765.6 ETH (about $70 million) to DeFi United, the restitution initiative formed after Kelp DAO's $292 million exploit. The release would make Arbitrum the single largest donor to the effort, joining prior commitments of 30,000 ETH from Consensys and Joseph Lubin, 30,000 ETH from Mantle, and 5,000 ETH from LayerZero.
The recovered ETH traces to the April 18 attack on Kelp DAO, in which a suspected Lazarus Group actor exploited a single-verifier configuration on a LayerZero-powered Omnichain Fungible Token bridge to drain 116,500 rsETH. The Arbitrum Security Council froze the attacker's address two days later, and the protocol's security council moved the funds into its own custody. The bulk of the stolen rsETH was then posted to Aave as collateral for WETH, leaving roughly $190 million in bad debt on the lending market.
Why it matters
A federal court order dated May 1 has barred Arbitrum DAO from moving the frozen ETH until a divestiture hearing, after plaintiffs holding old terrorism-related judgments against North Korea moved to claim the funds as restitution. Crypto attorney Gabriel Shapiro summarized the situation as: Arbitrum DAO is not allowed to do anything with the KelpDAO funds for now. Aave LLC has filed an emergency motion in federal court challenging the order, arguing that the Lazarus attribution is unproven speculation and that temporary possession of stolen assets does not equal ownership.
Market impact
The legal freeze widens the blast radius beyond Arbitrum and Kelp DAO: Aave's roughly $190 million hole remains unfunded, and the path from any subsequent divestiture order to a recovery on Aave runs through years-old civil judgments the protocol argues have no direct claim. LayerZero, the bridge whose verifier config was exploited, is also positioned as a potential target as plaintiffs and lenders look for deeper pockets.
Frequently asked questions
-
How much ETH did Arbitrum DAO vote to release to DeFi United?
30,765.6 ETH, worth about $70 million at the time of the vote. The proposal passed with 90.96% support — 182.2 million votes — making Arbitrum the largest single donor to DeFi United.
-
What happened in the Kelp DAO exploit on April 18?
An attacker suspected to be North Korea's Lazarus Group exploited a single-verifier configuration on a LayerZero-powered Omnichain Fungible Token bridge to drain 116,500 rsETH from Kelp DAO, an incident initially valued at around $292 million.
-
Why is Aave sitting on roughly $190 million in bad debt from this incident?
After stealing the rsETH, the attacker posted a significant portion of it to Aave as collateral to borrow WETH, leaving the lending protocol with an unrecoverable shortfall once the position was identified as tied to the exploit.
-
What does the May 1 court order actually restrict?
The order bars Arbitrum DAO from moving the frozen ETH until a divestiture hearing. It was sought by plaintiffs holding years-old terrorism-related judgments against North Korea who argue the recovered funds should be treated as restitution rather than redistributed to DeFi United.
-
How is Aave fighting the court order?
Aave LLC filed an emergency motion in federal court challenging the order, arguing that the Lazarus attribution is unproven speculation and that temporary possession of stolen assets does not confer ownership. The divestiture hearing will be the next material milestone.
CoinDesk
CryptoSlate
Crypto News