The $71 million in frozen ether sitting in an Arbitrum Security Council wallet is about to become the subject of a binding on-chain vote, and the outcome will test whether DeFi governance can enforce court orders while a separate legal battle over the same coins rages in Manhattan.
Aave and other parties harmed by last month’s Kelp DAO exploit have formally launched a Constitutional Arbitrum Improvement Proposal (AIP) to transfer 30,765 ETH from the immobilized wallet to an address controlled by Aave LLC. The proposal implements Judge Margaret Garnett’s recent ruling, which authorized the Arbitrum DAO to execute the transfer so long as the restraining notice filed by North Korean terrorism judgment creditors remains in effect. Voting opens May 15.
This is not a casual temperature check. A Constitutional AIP is the DAO’s highest-tier governance mechanism, binding on the protocol once passed. If delegates approve, the funds move. But “move” is a narrow word here: Aave LLC would hold the ETH under strict court-imposed restrictions, unable to transfer, redeploy, or liquidate the assets without explicit judicial permission. The coins would sit in a new wallet, still legally frozen, while lawyers fight over who ultimately owns them.
How the Funds Got Here
The 30,765 ETH trace back to the Kelp DAO exploit in April, when hackers drained roughly $292 million from the protocol’s rsETH bridge. Arbitrum’s Security Council, a multisig with emergency powers, managed to freeze about 25% of the stolen funds before the attackers could move them off the network. That intervention was fast by DeFi standards, but it created a new problem: what happens to money that belongs to exploit victims but is stuck under protocol-level control?
Blockchain forensics firms quickly attributed the attack to the Lazarus Group, the North Korean state-sponsored hacking unit that has become the industry’s most prolific adversary. Ripple began sharing threat intelligence with Crypto ISAC after the Kelp and Drift exploits drained over $500 million in a single month, an acknowledgment that the sector’s largest players now treat DPRK hackers as an operational reality rather than a distant threat.
The Lazarus attribution matters because it brought a second set of claimants out of the woodwork. Lawyers representing U.S. families who hold roughly $877 million in unpaid terrorism judgments against North Korea filed a restraining notice, arguing that the DAO held $877 million in potential DPRK property. Their theory: if the funds are ultimately deemed linked to Pyongyang for enforcement purposes, they could satisfy decades-old court awards that North Korea has never paid.
Aave pushed back. The protocol’s legal entity, Aave LLC, argued that the ether belongs to users who lost money in the exploit, not to the attackers who briefly controlled it. The terrorism creditors’ claim, Aave contended, would effectively punish DeFi depositors for the misfortune of being robbed by a sanctioned actor.
What the Court Order Actually Says
Judge Garnett’s ruling, issued earlier this month, authorized Arbitrum to vote on the transfer while preserving the terrorism creditors’ restraining notice. That sounds like a compromise, but the mechanics are worth parsing.
The order does three things. First, it allows the DAO to execute a governance vote moving the 30,765 ETH to an Aave LLC-controlled wallet. Second, it requires that the restraining notice travel with the funds, so the new custodian cannot unilaterally deploy or transfer them. Third, it keeps the underlying ownership dispute alive, meaning the terrorism creditors can continue litigating their claim even after the coins change addresses.
From a DeFi-plumbing perspective, the transfer is straightforward: the Constitutional AIP, if passed, triggers a transaction from the Security Council wallet to a new address that Aave LLC controls. The protocol’s smart contracts do not care about restraining notices; they execute if the governance threshold is met. The legal overlay is what prevents Aave from treating the funds as free capital.
The terrorism creditors have already signaled they will fight. In a 30-page brief filed last week, their lawyers reframed the exploit as fraud rather than theft, invoking the Terrorism Risk Insurance Act and arguing that Aave’s recovery effort is itself a form of improper conversion. The theory is aggressive, but it underscores how much is at stake: $877 million in unpaid judgments, with no realistic path to collection from Pyongyang, creates powerful incentives to pursue any asset that can be plausibly linked to the DPRK.
The Broader Precedent at Stake
This case is not just about 30,765 ETH. It is about whether decentralized governance can function as a credible enforcement layer when courts get involved.
Arbitrum’s Constitutional AIP process was designed to handle protocol upgrades and treasury decisions, not to serve as a de facto asset-recovery mechanism for off-chain litigation. The Security Council’s emergency freeze worked because the multisig signers acted quickly and the community backed them. But the freeze also trapped the DAO in a role it never asked for: custodian of disputed funds with no clear authority to release them.
Judge Garnett’s order offers a way out, but it also sets a precedent. If this works, courts may increasingly rely on DAO governance votes to execute asset transfers, treating on-chain voting as a form of quasi-judicial process. That could be clarifying, giving DeFi protocols a legal framework for responding to court orders, or it could be paralyzing, turning every disputed freeze into a litigation magnet.
The terrorism-creditor angle adds another layer. U.S. courts have long allowed victims of state-sponsored terrorism to pursue foreign assets under the Terrorism Risk Insurance Act and related statutes. Those statutes were written for sovereign wealth funds and embassy bank accounts, not for smart contracts. But the creditors’ lawyers are adapting the framework, arguing that if DPRK hackers touched the funds, those funds become collectible DPRK property.
Aave’s counterargument, that the ether belongs to exploit victims, not to the hackers who momentarily controlled it, sounds intuitively correct. But courts do not always follow DeFi intuitions. If the terrorism creditors can show that the funds passed through DPRK-linked wallets and were not fully laundered before the freeze, they may have a colorable claim under statutes designed to make terrorism financing harder to hide.
A related case underscores the stakes. Many of the same terrorism judgment creditors have sued Railgun DAO, alleging that the privacy protocol allowed North Korean-linked funds to move through its infrastructure rather than freezing them. That lawsuit takes the opposite tack from the Arbitrum dispute: instead of seizing frozen funds, the creditors argue Railgun should have frozen them and is liable for letting them pass. Together, the two cases sketch a pincer movement, one targeting protocols that freeze and one targeting protocols that do not.
What Happens Next
Voting on the Constitutional AIP begins May 15. The threshold for passage is high, requiring supermajority support under Arbitrum’s governance rules, but the proposal has backing from Aave and other major stakeholders who want the funds released (even if released into a legally restricted holding pattern).
If the vote passes, the 30,765 ETH will move to the Aave LLC address within days, pending any last-minute legal intervention. The terrorism creditors could seek an emergency stay, but Judge Garnett’s order already contemplates the transfer, so a stay would require new arguments.
If the vote fails, the funds remain in the Security Council wallet, still frozen, with no clear path forward. Arbitrum’s governance would have signaled reluctance to act as a court-execution mechanism, which could invite further litigation or legislative attention.
Either way, the underlying ownership dispute continues in Manhattan. The transfer does not resolve who gets the money; it only changes where the money sits while lawyers argue. Aave LLC would hold the bag, literally, bearing custody costs and legal risk for assets it cannot use.
For DeFi protocols watching from the sidelines, the lesson is uncomfortable. Emergency freezes work, but they also create liabilities. Once you immobilize funds, you become a stakeholder in whatever legal fight follows. And when the claimants include families who lost relatives to North Korean terrorism, the moral calculus gets complicated fast.
As one observer on the Arbitrum governance forum put it (paraphrasing a sentiment that has circulated since the restraining notice dropped): “We froze the funds to protect users. Now we’re caught between users, victims, and a court. Nobody prepared us for this.”
The vote starts in three days. The litigation will take longer.
