Aave's 29-page filing argues that briefly-stolen ETH cannot be treated as North Korean property, even when Lazarus Group was the thief — and warns the SDNY restraining order could chill every future DeFi hack recovery.
Aave filed a 29-page emergency motion in the Southern District of New York on Monday asking the court to vacate a restraining notice that has frozen $71 million in recovered ETH — money that was stolen from Aave users in April, recovered by Arbitrum's Security Council, and is now being claimed by victims of North Korean terrorism whose unpaid judgments total roughly $877 million.
The legal collision was always going to happen. After the Lazarus Group drained $292 million from KelpDAO's LayerZero bridge on April 18, the attackers used unbacked rsETH as collateral on Aave to borrow real assets, draining roughly $230 million more from the protocol. Arbitrum's Security Council managed to freeze 30,765 ETH — about $71.1 million at the time — before the funds could be moved off-chain. That recovery was supposed to flow back to Aave users through DeFi United, the emergency coalition formed by Aave, Lido, and EtherFi to restore rsETH backing across the affected protocols.
It did not flow. On May 1, the Southern District issued a restraining order at the request of three families holding unpaid terrorism judgments against the Democratic People's Republic of Korea. Their argument is straightforward: because Lazarus is a state-controlled North Korean unit, the stolen ETH is North Korean property, and they are entitled to seize it under the Terrorism Risk Insurance Act. They want the 30,765 ETH applied against judgments that have sat unpaid for years.
Aave's response makes the opposite argument with no hedging. A thief, the memorandum states, does not acquire lawful title to stolen property. The ETH was never North Korean — it belonged to Aave's users before it was stolen, and it still belongs to them after recovery. Treating an attacker's brief possession of stolen funds as ownership for purposes of victim recovery would, the filing argues, "upend basic property law" and create a precedent that would chill every future hack-recovery effort in DeFi.
The motion asks for three things in descending order of preference: vacate the restraining notice immediately; or schedule an expedited hearing with a temporary vacatur in the interim; or, if the freeze stays, require the plaintiffs to post a cash bond of "no less than $300 million" to cover the damages Aave argues the order is causing. The bond demand is the part that signals how seriously Aave is treating this. A $300 million bond is roughly four times the value of the frozen ETH, and it would be unrealistic for the plaintiffs to post — which is the point.
The plaintiffs are not unsympathetic. They are families of US service members and civilians killed in attacks the State Department has tied to the DPRK. The judgments are real, the harm is real, and the Treasury has spent years adding North Korean entities to its OFAC sanctions list. The legal precedent for seizing North Korean assets is well established when those assets are clearly state-owned: bank accounts, cargo ships, art purchased through shell companies. Stolen DeFi collateral is a category courts have not previously had to consider, and the question of whether briefly-possessed stolen tokens become attachable property is genuinely novel.
Aave is also right about the systemic stakes. If a court rules that any crypto a sanctioned actor briefly touches becomes attachable, every DeFi recovery effort runs through a US court that may sit on the assets indefinitely. The Drift recovery — Solana's $285 million Lazarus exploit in April — has not yet hit the same legal obstacle, but the Tether-led $127.5 million bridge financing for that one was structured precisely to avoid leaving Lazarus-touched funds on a chain a US court could reach. If the Aave motion fails, every future white-hat recovery becomes a legal liability instead of a clean win.
There is a procedural complication. Arbitrum DAO is the entity holding the frozen ETH, but Arbitrum DAO is not a US legal entity in any traditional sense; it is a token-governed collective. The plaintiffs' law firm, Gerstein Harrow, served the restraining notice on Offchain Labs, the development company that built Arbitrum. Whether a US court can compel a decentralised collective through its development arm is exactly the kind of question crypto lawyers have been waiting for a court to rule on. Aave's filing politely sidesteps that issue — its motion focuses on property law, not jurisdiction — but the ruling will set the precedent either way.
The court has scheduled an emergency hearing. Aave argues that every day the funds stay frozen, more affected users are forced into liquidations as the recovery delays cascade through DeFi credit markets. The plaintiffs argue that twenty years of unpaid judgments earn them the same right of immediate enforcement. Both can be true. The court has to choose.
