Legal entanglements are increasingly impacting decentralized finance (DeFi) protocols, as evidenced by a recent development involving Arbitrum DAO and frozen Ether (ETH) originally associated with the Kelp DAO exploit. Lawyers representing creditors with terrorism-related judgments against North Korea have served Arbitrum DAO with a restraining notice, aiming to prevent the transfer of approximately 30,766 ETH, valued at roughly $71 million. This action follows a New York federal court’s authorization of substituted service for the notice.
The frozen ETH was secured by the Arbitrum Security Council after being identified as linked to the exploiter in the April 18 Kelp DAO exploit. LayerZero, a blockchain interoperability protocol, attributed this exploit to North Korea’s state-sponsored Lazarus Group. The plaintiffs in the current action are not direct victims of the Kelp DAO exploit but are creditors holding unsatisfied terrorism judgments against North Korea, some dating back over a decade.
Key Takeaways
- Creditors holding terrorism judgments against North Korea have served Arbitrum DAO with a restraining notice to seize 30,766 ETH frozen after the Kelp DAO exploit.
- The U.S. District Court for the Southern District of New York authorized the substituted service of the notice, impacting Arbitrum DAO’s ability to distribute the frozen funds.
- The plaintiffs’ legal strategy relies on the Foreign Sovereign Immunities Act and the Terrorism Risk Insurance Act to claim the frozen ETH as North Korean state property due to the alleged involvement of the Lazarus Group.
- Arbitrum DAO is considering a proposal via its Snapshot governance to send the frozen ETH to a cross-protocol relief fund, DeFi United, with over 99% of current votes in favor.
- This situation raises significant legal questions regarding the precedence of claims between exploit victims and creditors of sanctioned states, and the potential personal liability of DAO members.
The legal basis for this claim hinges on the Foreign Sovereign Immunities Act (FSIA) and the Terrorism Risk Insurance Act (TRIA). These statutes permit judgment creditors of state sponsors of terrorism to attach assets believed to be held by or on behalf of the regime or its associated entities. The restraining notice specifically names APT-38 and the Lazarus Group as instrumentalities of the Democratic People’s Republic of Korea (DPRK).
The plaintiffs, represented by Gerstein Harrow LLP, are pursuing claims stemming from multiple default judgments against North Korea. These include a case involving the abduction and murder of Reverend Kim Dong-shik, resulting in a judgment of approximately $330 million; the 2006 Lebanon war case of Kaplan v. DPRK, with a judgment of about $169 million; and the 1972 Lod Airport attack case of Calderon-Cardona v. DPRK, with a judgment of $378 million. Cumulatively, these judgments, plus accrued interest, exceed $877 million.
Analysis of Regulatory Precedent
This case presents a novel and potentially significant legal precedent within the digital asset space, particularly concerning the intersection of sanctions law, international terrorism judgments, and decentralized autonomous organizations (DAOs). The core issue is how existing legal frameworks designed for traditional finance and state-level interactions apply to the borderless and pseudonymous nature of cryptocurrency and the governance structures of DAOs.
If the creditors’ claim is successful, it could establish a pathway for entities holding judgments against sanctioned states to pursue state-linked assets within DeFi protocols. This would significantly increase the regulatory and legal risks for DAOs and their participants, forcing them to scrutinize fund origins and potential state affiliations more rigorously. Furthermore, the court’s authorization of substituted service via a forum post highlights a potential adaptation of legal procedures to accommodate DAO governance. The outcome will likely influence how future exploits involving assets traceable to sanctioned entities are handled, potentially creating a complex legal landscape where immediate exploit victims may have to compete with established state creditors for recovery.
Meanwhile, Arbitrum DAO is proceeding with its own recovery plan. A proposal is currently active on Snapshot, authored by Aave Labs with co-authors including Kelp DAO, LayerZero, EtherFi, and Compound. This proposal aims to transfer the frozen ETH to DeFi United, a cross-protocol relief fund established to address the aftermath of the hack. The proposal is garnering substantial support, with over 99% of votes currently in favor. The plan includes directing funds to a Gnosis Safe controlled by Aave, Kelp DAO, EtherFi, and Certora, specifically for restoring the economic backing of rsETH, Kelp DAO’s liquid restaking token.
The Aave proposal also features an uncapped indemnification clause from Aave Labs, intended to shield the Arbitrum Foundation, Offchain Labs, and individual Security Council members from claims arising from the freezing or subsequent release of the ETH. However, the effectiveness of this private indemnification against an active, court-sanctioned restraining notice remains an open legal question.
“This is a predatory US law firm with a strategy that is pure evil,” stated blockchain investigator ZachXBT on X. “Whenever there’s a new Lazarus Group victim after an exploit and crypto assets get frozen. These clowns come in say they have a claim for an alleged DPRK victim from 26 years ago that has zero relation to crypto or exploits/hacks. Seems they tried it for the Harmony, Bybit, etc […] When all they did is read my posts after I did the difficult part of gathering evidence to support the freeze.”
Some members of the crypto community have expressed strong criticism of the plaintiffs’ legal strategy. Yearn contributor banteg argued that Arbitrum DAO might be legally justified in disregarding the order, given the funds’ direct link to Kelp and LayerZero victims. He advised parties involved in the recovery proposal to transfer funds directly to recovery contracts, bypassing potential pressure on individual signatories.
The legal strategy employed by Gerstein Harrow LLP has been utilized in prior cases, where the firm has argued that DAOs, as unincorporated associations, could render their individual members liable for the entity’s actions. At least one federal judge has permitted such claims to proceed. This legal posture leaves two critical questions for Arbitrum’s delegate base to consider: the potential personal liability of ARB token holders who vote in favor of the DeFi United proposal, and the broader precedential question of which creditor group—immediate exploit victims or holders of unsatisfied judgments against a sanctioned state—holds a superior claim in such complex recovery scenarios.
Details can be found on the website : www.theblock.co