Aave has asked a U.S. federal court to block an attempt by victims of North Korean terrorism to seize approximately $71 million in cryptocurrency frozen after last month's rsETH-related exploit, escalating a legal dispute that has already split Arbitrum's governance.

Market Context

The filing, submitted Monday in the Southern District of New York, seeks to vacate a restraining notice served on Arbitrum DAO by lawyers representing judgment creditors of the Democratic People's Republic of Korea. At the center of the fight is 30,765 ETH—valued at roughly $71 million—that Arbitrum's Security Council froze following the April exploit when attackers used improperly valued or unbacked rsETH as collateral on Aave.

Analysis

Aave argues the frozen assets belong to users of its protocol, not North Korea, and warns that keeping them immobilized risks "irreparable harm" to the platform and the broader DeFi ecosystem. The dispute centers on whether stolen property briefly held by hackers becomes their legal property. The plaintiffs—three sets of judgment creditors holding $877 million in damages awards against North Korea—argue it does because the rsETH attackers are widely believed to be linked to Pyongyang's Lazarus Group, meaning the recovered ether can be claimed against those decades-old judgments.

Aave's lawyers call that theory "flatly wrong" and warn it would punish blameless users while rewriting basic property law. The filing argues the restrained ETH "belong[s] to completely blameless third parties" and that even if a thief briefly held the assets, that does not confer legal ownership. Aave also disputes the underlying attribution, calling claims that the exploit was carried out by DPRK actors "conjecture" based on unverified reports.

In a 30-page response filed Tuesday, attorneys for victims of three North Korea terrorism cases reframed the April 18 hack as fraud rather than theft—a distinction that could give attackers legal title to borrowed crypto. The filing invokes the Terrorism Risk Insurance Act to claim the frozen ether as North Korean state assets.

Key Numbers

- $71 million in cryptocurrency (30,765 ETH) at the center of the dispute

- $230 million in ETH allegedly withdrawn from Aave Protocol during the exploit

- $877 million in damages awards held by the judgment creditors against North Korea

- April 18: Date of the rsETH exploit on Aave

What to Watch

Aave is asking the court to immediately lift the restraining notice, or at a minimum suspend it while the case proceeds. The outcome could have consequences far beyond this specific dispute. If courts allow seized or recovered crypto to be claimed by outside creditors, it could deter future rescue efforts and complicate how the industry responds to hacks—where speed and coordination are often the only tools available to limit damage. Watch for the court's ruling on Aave's motion to vacate, as well as any further developments in Arbitrum DAO governance regarding the frozen funds.

The filing warns that keeping the funds frozen "increases the likelihood of cascading liquidations, sustained liquidity outflows, and irreversible changes to user positions"—a chain reaction the DeFi industry has been trying to avoid for two weeks since the exploit first occurred.