Start now →

Judge clears path for Aave to move $71 million in ETH linked to North Korea hack

By Sam Reynolds · Published May 9, 2026 · 4 min read · Source: CoinDesk
EthereumDeFiRegulationSecurityMarket Analysis
PolicyShare this articleX (Twitter)LinkedInFacebookEmail

Judge clears path for Aave to move $71 million in ETH linked to North Korea hack

Judge Margaret Garnett allowed frozen exploit funds on Arbitrum to move to Aave, but the legal freeze follows the assets as terrorism plaintiffs continue their claim.

By Sam Reynolds|Edited by Nikhilesh De May 9, 2026, 4:16 a.m. 2 min readMake preferred on
court, gavel

What to know:

A Manhattan federal judge has cleared the way for Aave’s recovery effort to move forward after last month’s North Korea-linked rsETH exploit, allowing $71 million in frozen ether to be transferred out of Arbitrum while preserving North Korean terrorism victims’ legal claim on the funds.

In a two-page order published late Friday U.S. time, Judge Margaret Garnett modified a restraining notice previously served on Arbitrum DAO to allow an onchain governance vote transferring the immobilized ETH to a wallet controlled by Aave LLC.

The order also shields participants from liability under the notice, stating that anyone who initiates, votes on or participates in the transfer would not violate the freeze.

Judge Garnett's ruling follows an earlier off-chain Snapshot temperature check in which Arbitrum delegates overwhelmingly signaled support for returning the frozen ETH as part of Aave’s broader recovery plan. Any actual transfer, however, still requires a separate binding onchain governance vote.

The ruling resolves an immediate standoff that had threatened to derail a coordinated DeFi recovery effort after attorney Charles Gerstein, representing families holding roughly $877 million in unpaid terrorism judgments against North Korea, argued the frozen ETH could be seized because the exploit has been widely attributed to Lazarus Group, which is supported by Pyongyang.

Beyond the Arbitrum dispute

Gerstein’s move against Arbitrum fits into a broader legal strategy to pursue North Korean-linked assets as they surface on decentralized finance (DeFi) infrastructure.

In a separate January lawsuit, many of the same terrorism judgment creditors that went after Arbitrum sued Railgun DAO, alleging the privacy protocol allowed North Korean actors to move funds that should have been frozen and made available to creditors.

At the time, the plaintiffs claimed North Korean hackers used Railgun to launder funds from prior cyberattacks, including the $1.5 billion Bybit exploit, and argued the protocol should have frozen those assets rather than allowing them to move onward.

Once DPRK-controlled wallets were moving funds through the protocol, those assets became potential targets for collection, they argued.

In March, they asked a Washington federal court clerk to enter default against Railgun DAO after alleging the protocol failed to respond to the complaint despite being served. Their complaint also names Digital Currency Group, alleging the crypto investment firm’s $10 million purchase of Railgun governance tokens in 2022 made it a participant in the DAO’s governance and economics.

And in February, the plaintiffs moved to secure USDT that the U.S. government had sought to seize through a forfeiture motion.

Ethereum News

More For You

Senate Banking Committee plans to hold key market structure hearing on Thursday

By Nikhilesh De|Edited by Jesse Hamilton5 hours ago
Senator Kirsten Gillibrand (CoinDesk)

The Senate Banking Committee announced it would hold its markup hearing for the Clarity Act on March 14.

What to know:

Read full storyLatest Crypto News Senator Kirsten Gillibrand (CoinDesk)

Senate Banking Committee plans to hold key market structure hearing on Thursday

5 hours ago
Bitcoin (BTC) price on May 8, Friday (CoinDesk)

Coinbase rebounds as altcoins surge with bitcoin holding above $80,000

8 hours ago
(CoinDesk)

AI agents fueled a frenzy of startup building at the Consensus Miami EasyA hackathon

9 hours ago
SEC Chairman Paul Atkins (Jesse Hamilton/CoinDesk)

SEC chair Atkins signals new rules for onchain markets, AI-driven finance

10 hours ago
Payward and Kraken co-CEO Arjun Sethi. (CoinDesk)

Kraken parent goes for the OCC charter in bid to become a federal crypto bank

12 hours ago
ECB President Christine Lagarde. (Felix Schmidt/ECB Press)

ECB's Lagarde’s digital euro warning: Why Europe shouldn’t just copy the U.S. stablecoin model

12 hours ago
Top StoriesHiring

U.S. added 115K jobs in April, nearly doubling expectations

16 hours ago
AI Collective founder Chappy Asel on stage at Consensus Miami (CoinDesk)

AI agents could solve crypto’s user problem

23 hours ago
Ether crashed 35% in May (keithsutherland/Getty images+/Unsplash)

Bitcoin shows 2-cent price on Revolut as users report apparent BTC display glitch

19 hours ago
(Brock Wegner/Unsplash)

Arbitrum delegates back $71 Million ETH recovery plan despite U.S. seizure fight

20 hours ago
Trading prices displayed on a monitor screen.( AhmadArdity /Pixabay)

S&P 500 call options volume surges to record $2.6 trillion. Here's what it means for bitcoin

19 hours ago
This article was originally published on CoinDesk and is republished here under RSS syndication for informational purposes. All rights and intellectual property remain with the original author. If you are the author and wish to have this article removed, please contact us at [email protected].

NexaPay — Accept Card Payments, Receive Crypto

No KYC · Instant Settlement · Visa, Mastercard, Apple Pay, Google Pay

Get Started →