A legal battle in a New York federal court could set a major precedent for how stolen and recovered crypto assets are treated in the U.S. legal system.
A legal battle in a New York federal court could set a major precedent for how stolen and recovered crypto assets are treated in the U.S. legal system.

Aave is petitioning a U.S. federal court to unfreeze 30,766 Ether, worth approximately $71 million, arguing the funds belong to victims of a recent exploit and not, as plaintiffs claim, to North Korean-linked hackers against whom they hold terrorism-related judgments.
"A thief does not own what he steals. These funds belong to the affected users they were stolen from—full stop,” Aave founder Stani Kulechov said in a statement, emphasizing that possession of stolen crypto does not establish ownership.
The dispute stems from an April 18 exploit where an attacker borrowed roughly $230 million from Aave users with unbacked rsETH tokens from Kelp DAO. Arbitrum’s Security Council later secured 30,766 ETH from the attacker, but the funds were frozen by a May 1 court order obtained by creditors with judgments against North Korea.
The case pits the recovery efforts of a decentralized finance coalition, which has amassed over $327 million to repay victims, against creditors using U.S. law to seize assets allegedly tied to a sanctioned state. The outcome could define the legal standing of DAOs and the reach of U.S. courts over assets on Layer 2 networks, with a hearing to determine control of the funds now pending.
The legal challenge complicates a wide-ranging recovery effort known as “DeFi United,” a coalition that includes Aave, Consensys, Lido, and the Avalanche Foundation. The group has raised more than 137,700 ETH, valued at nearly $327 million, to help restore the value of rsETH and cover user losses from the hack. The release of the frozen funds held by Arbitrum is a key component of this plan.
Plaintiffs in the case, who hold unpaid judgments against North Korea for past acts of terrorism, argue that the attacker was likely linked to the country’s Lazarus Group hacking collective. On that basis, they successfully argued for a restraining notice to treat the frozen assets as North Korean property that can be seized.
In a May 4 emergency motion filed in the Southern District of New York, Aave countered that the claims rely on unproven links and that the funds are traceable proceeds of theft belonging to blameless Aave protocol users.
Aave has asked the court to either vacate the order immediately or require the plaintiffs to post a $300 million bond to cover potential damages if the freeze is prolonged. The lending protocol argues that delaying the return of funds harms the victims of the hack and destabilizes the broader DeFi ecosystem.
The case also raises fundamental questions about the legal status of Decentralized Autonomous Organizations (DAOs). Aave’s filing questions whether the Arbitrum DAO can be treated as a formal legal entity that can be served with a restraining notice in the first place.
Legal observers note that the court’s decision could set a critical precedent. It will test the jurisdiction of U.S. courts over assets on decentralized networks and could shape how recovered crypto assets are handled in cross-border legal disputes moving forward.
This article is for informational purposes only and does not constitute investment advice.