K

KeyAudit

· ·defi-exploit·infrastructure·regulatory

Arbitrum delegates back $71M ETH recovery plan amid U.S. seizure fight

Arbitrum DAO delegates voted overwhelmingly in favor of a plan to release 30,765 ETH (worth $71 million) frozen after the April 18 rsETH exploit linked to North Korea's Lazarus Group. The non-binding sentiment check saw over 90% support for releasing funds to a recovery effort led by Aave, KelpDAO, LayerZero, EtherFi, and Compound. The funds were frozen by Arbitrum's Security Council after attackers used unbacked rsETH tokens as collateral on Aave to borrow approximately $230 million in ETH. The vote took place on an off-chain polling platform and does not directly move funds. Any actual transfer requires a formal onchain Constitutional Arbitrum Improvement Protocol (AIP), which can execute binding actions if approved. The eight-day L2-to-L1 withdrawal delay provides time for legal intervention. The funds are also subject to a Manhattan federal court dispute, where families with unpaid terrorism judgments against North Korea claim the ETH belongs to Pyongyang via the Lazarus Group, resulting in a restraining notice. Aave has moved to vacate the notice, arguing the assets belong to innocent users. For wallet and key holders, this incident underscores the legal and operational risks in DeFi when frozen assets overlap with geopolitical disputes. Users should be aware that even legitimate recovery efforts may be delayed by court orders and governance processes. The case also highlights the importance of indemnification protections for governance participants and the need for robust risk frameworks that include cybersecurity and interoperability reviews, as noted by Aave Labs. The outcome could set a precedent for how seized crypto assets are handled in multi-jurisdictional contexts.

Key facts

  • Arbitrum delegates voted >90% to release 30,765 ETH ($71M) frozen after Lazarus-linked exploit.
  • Funds frozen by Security Council after April 18 exploit using unbacked rsETH on Aave.
  • Recovery effort led by Aave, KelpDAO, LayerZero, EtherFi, and Compound to make users whole.
  • Manhattan court dispute over ownership; restraining notice claims funds are North Korean property.
  • Any transfer requires onchain AIP and faces 8-day withdrawal delay, allowing court intervention.

KeyAudit data perspective

📊 KeyAudit data: Arbitrum historical leak records: 1

Related

← Back to list