Sophia Bennett
Crypto Analyst
Arbitrum's community just voted overwhelmingly to release $71 million in frozen Ethereum. The only problem? A Manhattan federal court may not let them.
Arbitrum delegates voted with more than 90% support to release about $71 million in ether frozen after the Lazarus‑linked rsETH exploit, earmarking the funds for an industry‑led effort to compensate affected users. The result was decisive. The legal battle surrounding it is anything but.
How the Exploit Happened
To understand why this vote matters, you need to know what happened first.
The on‑chain vote authorises the release of 30,765 ETH frozen by Arbitrum's Security Council after the April 18 exploit, when attackers used unbacked rsETH tokens as collateral on Aave to borrow roughly $230 million in ETH from the protocol.
The attacker supplied 89,567 rsETH as collateral across Aave, Compound, and Euler, borrowing approximately $236 million in WETH, wstETH, and other assets against those positions. LayerZero publicly attributed the attack to North Korea's Lazarus Group, the same collective behind the 2022 Ronin Network hack and the 2025 Bybit breach.
Arbitrum's Security Council moved quickly, intercepting and freezing a portion of those funds before they could be moved further.
Who Is Behind the Recovery Effort
This is not one protocol acting alone. The response has been coordinated across the entire DeFi ecosystem.
The proposal was co‑authored by Aave Labs, Kelp DAO, LayerZero, EtherFi, and Compound, and forms part of the broader DeFi United recovery effort, which brings together multiple protocols to contain the impact of the exploit.
If approved, the funds will be transferred to a designated recovery address managed through a 3‑of‑4 multisignature wallet, with signers from Aave Labs, Kelp DAO, Certora, and EtherFi.
The vote itself was not close. More than 90.5% of voting power supported the motion, representing 173.9 million Arbitrum tokens, while less than 1% voted against the proposal.
The Legal Problem Nobody Expected
Here is where it gets complicated. The frozen ETH has attracted attention that has nothing to do with DeFi recovery.
The frozen ether is the subject of a Manhattan federal court fight, as lawyers for families holding $877 million in terrorism judgments against North Korea seek to seize the assets as North Korean property.
The Southern District of New York issued an order on May 1, barring any transfer of the seized funds. Terror attack creditors with judgments against North Korea filed the legal action, stalling compensation plans for victims across Aave, LayerZero, and other affected protocols.
Aave has asked the federal court to lift the restraining notice, arguing the seized funds belong to innocent Aave users, not North Korea or its alleged Lazarus Group hackers, and warning that treating briefly stolen assets as the thief's property would upend basic property law.
Aave also warned that keeping the funds frozen could trigger cascading liquidations and broader instability in decentralised finance, and says a ruling for the North Korea judgment creditors could chill future crypto hack recovery efforts.
The Eight‑Day Window
The governance vote passing does not mean the money moves immediately.
Because the measure is a Constitutional AIP, the transfer cannot occur for at least eight days, during which the court may intervene. Arbitrum's proposal includes indemnification protections that highlight the unusual legal risks surrounding the vote.
That eight‑day window is now the most watched clock in DeFi. The community has spoken clearly. Whether the courts agree is an entirely different question, and one that could set a precedent for how decentralised governance interacts with US law for years to come.
