In a legal move that intensifies an existing controversy, Aave, a prominent decentralized lending platform, has approached a U.S. federal court to prevent victims of North Korean terrorism from seizing approximately $71 million in crypto assets frozen due to a recent rsETH exploit on the Arbitrum network. The legal action was filed Monday in the Southern District of New York, aiming to nullify a restraining notice imposed by attorneys representing creditors with judgments against North Korea. Aave insists that these funds are owned by users of its protocol rather than North Korea and warns that continued freezing could cause ‘irreparable harm’ to both its platform and the DeFi ecosystem at large.
The dispute revolves around 30,765 ETH frozen by Arbitrum’s Security Council after an April incident where attackers exploited incorrectly valued or unsupported rsETH on Aave as collateral. This exploit allegedly led to roughly $230 million in ETH being withdrawn from the Aave Protocol, with some of these funds subsequently intercepted and immobilized on Arbitrum, pending redistribution to affected users.
Central to this legal battle is whether stolen assets briefly controlled by hackers can be legally claimed as their property. The plaintiffs—three groups with $877 million in damages against North Korea—assert that they do because the rsETH attackers are suspected of ties to Pyongyang’s Lazarus Group, hence allowing for claims against longstanding judgments.
Aave’s legal team dismisses this claim as “flatly wrong,” cautioning it would unjustly penalize innocent users while altering fundamental property law principles. Aave’s motion refutes this assertion, maintaining that the restrained ETH belongs to ‘completely blameless third parties,’ not North Korea, and argues that temporary possession by thieves does not equate to legal ownership.
Furthermore, Aave contests the attribution of the exploit to DPRK actors as mere ‘conjecture’ based on unconfirmed reports. The platform is requesting the immediate removal or temporary suspension of the restraining notice during ongoing hearings.
Aave warns that maintaining this freeze could exacerbate losses and destabilize already pressured DeFi markets following the exploit, increasing risks of cascading liquidations, sustained liquidity outflows, and irreversible changes to user positions—an industry-wide concern over the past two weeks. The case’s outcome might set a precedent affecting future cryptocurrency rescue operations and complicate industry responses to hacks, where rapid coordination is crucial for damage mitigation.