A federal judge just handed DeFi\u2019s recovery effort a critical win. U.S. District Judge Margaret Garnett of the Southern District of New York has cleared the path for Aave LLC. She order to transfer $71 million in frozen ETH off Arbitrum and into an Aave-controlled wallet.\u00a0<\/p>\n
\u7f8e\u56fd\u7ebd\u7ea6\u5357\u533a\u6cd5\u5b98 Margaret Garnett \u5df2\u4e3a Aave \u8f6c\u79fb\u4e0e\u671d\u9c9c\u76f8\u5173\u9ed1\u5ba2\u4e8b\u4ef6\u6709\u5173\u7684 7100 \u4e07\u7f8e\u5143 ETH \u626b\u6e05\u6cd5\u5f8b\u969c\u788d\uff0c\u5141\u8bb8 Arbitrum \u4e0a\u88ab\u51bb\u7ed3\u7684\u653b\u51fb\u8d44\u91d1\u8f6c\u81f3 Aave LLC\uff0c\u4f46\u76f8\u5173\u6cd5\u5f8b\u9650\u5236\u4ee4\u5c06\u968f\u8d44\u4ea7\u4e00\u5e76\u8f6c\u79fb\u3002\u6b64\u524d\uff0c\u6301\u6709\u9488\u5bf9\u671d\u9c9c\u5224\u51b3\u7684\u539f\u544a\u8bd5\u56fe\u9650\u5236\u8fd9\u7b14\u8d44\u91d1\uff0c\u4e3b\u5f20\u5176\u53ef\u7528\u4e8e\u6267\u884c\u4e0e\u671d\u9c9c\u76f8\u5173\u7684\u8d54\u507f\u5224\u51b3\uff1bAave\u2026<\/p>\n
\u2014 \u5434\u8bf4\u533a\u5757\u94fe (@wublockchain12) May 9, 2026<\/a><\/p>\n The ruling resolves an immediate legal standoff that threatened to derail one of the most coordinated recovery efforts in DeFi history. But the legal battle is far from over. Aave news today marks a turning point in a story that began with one of 2026\u2019s largest crypto exploits.<\/p>\n How We Got Here: The KelpDAO Exploit<\/p>\n On April 18, 2026, KelpDAO lost approximately $292 million in rsETH through a sophisticated attack on its LayerZero bridge. Attackers exploited a single-verifier configuration, compromising RPC nodes to feed false data and fraudulently unlock roughly 116,500 rsETH from Ethereum mainnet escrow. The attack was widely attributed to North Korea\u2019s Lazarus Group. The immediate fallout triggered between $7 billion and $13 billion in temporary DeFi outflows.<\/p>\n Arbitrum\u2019s Security Council<\/a> responded by freezing 30,766 ETH linked to the exploit. The Arbitrum community then voted overwhelmingly, with above 90% support, to transfer those funds to a recovery multisig managed by Aave, KelpDAO, Certora, and EtherFi as part of the DeFi United<\/a> coalition.<\/p>\n Then on May 1, attorney Charles Gerstein filed a restraining notice<\/a> on Arbitrum DAO. On behalf of terrorism judgment creditors holding $877 million in unpaid claims against North Korea. Their argument was direct because Lazarus Group carried out the hack; the frozen ETH qualifies as DPRK property subject to seizure.<\/p>\n Judge Garnett\u2019s Ruling<\/p>\n Judge Garnett\u2019s two-page order modifies the restraining notice rather than vacating it. The frozen ETH can now move to Aave LLC through a binding onchain Arbitrum DAO governance vote. Critically, the legal restraining order travels with the assets, attaching to Aave LLC upon transfer. The judge also shielded anyone who initiates, votes on, or participates in the transfer from personal liability under the notice.<\/p>\n Aave\u2019s core argument carried the day. The funds belong to innocent protocol users, not to the hackers or North Korea. As Aave stated plainly in its emergency motion<\/a>, a thief does not gain lawful ownership of stolen property simply by taking it.<\/p>\n Recovery Progress and What Comes Next<\/p>\n The protocol has already made meaningful progress. On May 6, liquidators closed the thief\u2019s eight identified positions on Aave V3. They then transferred the recovered rsETH collateral to the Recovery Guardian under the approved governance process. Mantle DAO and Arbitrum DAO have both passed supporting proposals.\u00a0<\/p>\n The next phase focuses on neutralizing the inflated rsETH supply. On Arbitrum, liquidated rsETH will be burned. Kelp will retire the corresponding LayerZero packet to prevent new rsETH from minting on Ethereum. On Ethereum, the team will send seized rsETH to the bridge lockbox. It will combine the funds with committed ETH from DeFi United coalition partners to restore rsETH\u2019s full backing and reopen withdrawals.<\/p>\n What This Means for Investors and Developers<\/p>\n For Aave ETH holders and DeFi investors, the ruling provides meaningful relief. Separate funds are being borrowed as a contingency to cover the difference while the immobilized ETH moves through the governance process. The path to full market normalization is now clearer.<\/p>\n For developers and protocol architects, the broader implications of this case cannot be ignored. Gerstein\u2019s legal strategy extends beyond Arbitrum. The same creditors have sued Railgun DAO and named Digital Currency Group in a separate case. They argue a $10 million governance token purchase made DCG liable for DPRK fund flows through the protocol.<\/p>\n The industry will use this precedent to define how DeFi protocols handle recovered hack funds for years to come. DeFi platforms across the sector are already replacing single-verifier bridge configurations, including the setup exploited in the KelpDAO hack<\/a>. Moreover, the legal and technical lessons from April 18 are reshaping how developers build DeFi platforms and protect recovery efforts.<\/p>\n