Aave Challenges Court Order Freezing $73M in Ethereum From Kelp DAO Exploit - Blockonomi
by Trader Edge · BlockonomiKey Takeaways
Table of Contents
- Aave submitted an urgent legal filing in New York seeking to remove a restraining order preventing distribution of 30,766 ETH (approximately $73M) to exploit victims
- Gerstein Harrow LLP asserts its clients hold rights to the assets through default judgments against North Korea
- Aave contends that stolen assets cannot legally transfer ownership to criminals
- The collaborative “DeFi United” initiative has accumulated over $327 million for rsETH token holders
- Aave seeks a $300 million bond requirement should the court maintain the freeze
Aave LLC submitted an urgent court filing Monday in New York federal court challenging a restraining order that has immobilized approximately $73 million worth of Ether linked to the Kelp DAO security breach on April 18.
The restraining order was issued Friday by Gerstein Harrow LLP representing clients holding more than $877 million in judgments against the Democratic People’s Republic of Korea. The firm contends that since North Korean threat actors allegedly controlled the compromised tokens, their clients possess legitimate claims to the assets.
Stani Kulechov, founder of Aave, responded forcefully to these claims. “A thief does not own what he steals,” Kulechov declared. “These funds belong to the affected users they were stolen from — full stop.”
The April 18 security incident exploited a vulnerability in a cross-chain bridge associated with Kelp DAO’s rsETH token. An attacker leveraged unbacked collateral to extract approximately $230 million in Ether from Aave platform users.
Following the breach, the Arbitrum protocol successfully recovered 30,766 ETH and designated it for restitution purposes. This cache of Ether, currently valued near $73 million, represented the initial significant tranche of recovered assets intended for victim compensation.
The Arbitrum DAO is currently conducting governance voting to authorize releasing these funds as component of a comprehensive industry recovery program. The voting period concludes Thursday.
DeFi United Recovery Initiative Progress
This recovery program, designated “DeFi United,” has evolved into a sector-wide collaborative effort. The initiative has accumulated more than 137,700 ETH, valued at approximately $327 million, though distribution of the frozen assets remains contingent on court proceedings.
Aave maintains the restraining order jeopardizes the entire recovery operation. Legal counsel representing the protocol cautioned the court that continued delays inflict “irreparable harm” upon the protocol, its user base, and the broader decentralized finance ecosystem.
The legal submission additionally cautioned that immobilized collateral could prevent Aave platform users from satisfying obligations on additional positions throughout the cryptocurrency markets.
Legal Framework and Attribution Questions
Aave’s legal representatives argued the plaintiffs’ case depends on “conjecture from posts on the internet” connecting the exploit to North Korea’s Lazarus Group. No official attribution has been established.
The court filing emphasizes the frozen assets “do not belong to North Korea or any affiliated entities” and rightfully belong to the Aave users who suffered losses.
Aave further cautioned that judicial approval of such restraining notices could discourage future cryptocurrency recovery initiatives and incentivize malicious actors to target additional DeFi protocols.
Gerstein Harrow has pursued comparable legal actions previously, including cases involving the 2023 Heco Bridge compromise and the 2025 Bybit security incident.
Should the court decline to immediately vacate the restraining notice, Aave requests that Gerstein Harrow post a $300 million bond to justify maintaining the freeze.
As of Monday evening, no judicial decision has been rendered on the emergency filing and no court hearing has been scheduled.