The decentralized finance protocol Aave has filed a lawsuit in US federal court, seeking to prevent the transfer of approximately $71 million in frozen crypto funds to alleged North Korea-linked victims. This legal action follows a major cyberattack involving rsETH on Arbitrum last month, after which these assets were frozen to prevent illicit outflows. The case has reignited debate within the Arbitrum community and marks a new chapter in the dispute.
Aave’s legal argument
Aave, recognized as one of the most widely used lending platforms in global DeFi, argues that it exists to protect users’ assets. Through its lawyers, the company submitted a petition to the Southern District of New York, requesting that the court revoke an injunction delivered to the Arbitrum DAO. The company maintains that the frozen assets do not belong to North Korea but rather to individual users utilizing the Aave protocol.
Aave further asserts that ongoing intervention would threaten not just its own ecosystem but also cause significant harm across the broader DeFi market.
“The frozen ETH belongs entirely to unrelated third-party users. The mere fact that the assets temporarily passed through the hands of thieves does not alter legal ownership,” the petition emphasizes, arguing that links to North Korean actors remain unsubstantiated and are based only on unverified media reports.
The petition also points out that accusations tying the attack to North Korean actors stem from speculation rather than confirmed evidence.
Background and lawsuit developments
During the April attack, perpetrators exploited rsETH assets that were either under-collateralized or not properly valued as collateral, resulting in the illicit withdrawal of approximately $230 million worth of ETH from the Aave protocol. Of this amount, a significant portion was frozen by Arbitrum’s security council, with plans to return funds to impacted users.
Central to the lawsuit is the question of whether the seized crypto assets can be considered the property of cybercriminals, even if they controlled the assets only briefly.
The plaintiffs reference a series of compensation rulings totaling $877 million awarded in earlier cases against North Korea. They also argue that the attackers are widely believed to be linked to the Lazarus Group, a North Korean cyber entity, and therefore believe the frozen ETH should be transferred as compensation to the victims.
Aave’s legal team counters that this would violate fundamental principles of ownership, risking unjust harm to innocent users of the platform.
Implications for the DeFi sector
Aave urges the court to immediately lift or, at minimum, suspend the restriction order while legal proceedings continue. According to the protocol, prolonged inaccessibility of these assets on Arbitrum could trigger liquidity shortages in DeFi, prompt mass fund withdrawals, and lead to permanent user losses.
The outcome of this lawsuit may have sector-wide consequences. Should courts allow recovered crypto assets to be distributed to creditors other than direct victims, it would complicate future rescue operations and significantly reduce crisis management options during such events in the DeFi industry.
