Gerstein Harrow seeks to block Arbitrum DAO moving 30,766 ETH frozen after Kelp exploit
Court-signed restraining notice and writs of execution add a legal layer to rsETH recovery plans.
A New York court-signed restraining notice and three writs of execution are being used to try to stop Arbitrum DAO from moving 30,766 ETH frozen after the Kelp DAO exploit. The filing creates a legal overhang that could delay or redirect how any rsETH restitution plan ultimately gets funded.
Key Takeaways
- A restraining notice and three writs of execution were disclosed as targeting Arbitrum DAO’s ability to move 30,766 ETH frozen after the Kelp exploit, with contempt-of-court risk raised for noncompliance.
- Arbitrum’s Security Council froze 30,766 ETH, valued at over $73 million, in a wallet linked to the April 18 Kelp hack.
- The judgment creditors behind the filing were not Kelp exploit victims and instead hold default judgments against North Korea from 2010, 2015, and 2016 totaling over $877 million plus interest.
- Aave Labs proposed routing the frozen ETH to “DeFi United” to restore rsETH and compensate holders, setting up a contested destination for the same balance.
New York Court Paperwork Targets Arbitrum’s Frozen Kelp ETH
Gerstein Harrow LLP has filed a restraining notice aimed at preventing Arbitrum DAO from moving 30,766 ETH that was frozen after the Kelp DAO exploit. Charlie Gerstein, a lawyer at the firm, told the Arbitrum DAO forum that a New York district court signed the restraining notice and three writs of execution.
The practical shift is structural for Arbitrum governance. What had been a coordination problem around a frozen exploit balance now carries a court-enforcement framing, with Gerstein explicitly raising contempt-of-court exposure if the DAO moves the ETH despite the notice.
How 30,766 ETH Was Frozen After the April 18 Kelp Hack
Kelp DAO suffered a $292 million hack on April 18 that is believed to have been carried out by TraderTraitor, described as a subgroup of North Korea’s state-backed Lazarus Group. Days later, Arbitrum’s Security Council took emergency action to freeze 30,766 ETH held in a wallet linked to the exploit, valued at over $73 million.
That single frozen balance is now the center of gravity for recovery timelines. Even if the ETH never moves, the visibility and size of the wallet means any delay, legal dispute, or governance deadlock can ripple into broader Arbitrum ecosystem expectations around restitution and incident response.
Competing Claims: Kelp Victim Restitution vs DPRK Judgment Enforcement
Gerstein Harrow’s clients were not affected by the Kelp exploit. Their claim is anchored in default judgments against North Korea from three US cases in 2010, 2015, and 2016 totaling over $877 million in compensatory and punitive damages, plus interest.
The firm’s theory is that the stolen ETH is “property” in which the DPRK has a stake because the hacker group is affiliated with North Korea. The restraining notice functions as a transfer restriction that is presented as carrying penalties for violations. The writs of execution are framed as court authorizations to enforce a judgment against a debtor’s property.
Arbitrum DAO pushback has focused on the second-order effect. A DAO member posting under the handle Zeptimus warned that if the action succeeds, “the DPRK debt will be transferred to the Kelp DAO victims.” Zeptimus wrote: “Your clients’ losses are real and the DPRK should answer for them. But the remedy the restraining notice asks for, blocking the return of stolen funds to their actual owners shifts the cost of the DPRK’s debt onto a different set of victims who were themselves robbed. That compounds the original harm. It doesn’t redress it.”
Decision Points for Arbitrum DAO and rsETH Recovery Plans
The immediate decision point is whether Arbitrum DAO takes any on-forum or onchain action to unfreeze or move the 30,766 ETH after the April 25 proposal from Aave Labs. That proposal called for unfreezing the ETH and routing it to “DeFi United,” described as a fund aimed at restoring rsETH and compensating holders.
The second decision point is legal clarity. Further court filings, service, or clarification on the scope of the restraining notice and the three writs of execution will matter, particularly if enforcement is directed at identifiable signers or entities rather than the DAO in the abstract.
Traders should also watch for updates from Arbitrum’s Security Council on whether the freeze remains in place and what conditions could lift it. Any signal that the frozen ETH is being redirected away from rsETH restoration and toward judgment enforcement tied to the $877 million-plus default judgments would reprice recovery expectations.
The Legal Overhang Traders Should Price Into Arbitrum Governance
I treat this as a governance risk that has been upgraded into a legal process risk. The threshold that matters is whether the restraining notice and writs translate into real-world constraints on the people who can actually move funds, because that is what turns a frozen-wallet incident into a durable overhang.
Even if the ETH never leaves the wallet, the real test is whether Arbitrum can execute a victim-compensation route like “DeFi United” without triggering court escalation. If that path is blocked or delayed, the setup starts to look structural rather than narrative-driven, because the destination of a $73 million balance becomes contested capital inside the ecosystem.
