North Korea creditors stake claim to frozen Kelp DAO ether

Judgment creditors pursuing unpaid terrorism awards against North Korea had placed a legal restraint over 30,765.667501709008927568 ETH immobilized on Arbitrum, creating a competing claim to assets that DeFi organizations wanted to use for victims of the Kelp DAO bridge exploit.

The dispute was publicly visible on May 3, 2026, after an attorney for the creditors posted the restraining notice and three writs of execution to Arbitrum’s governance forum. The notice instructed the decentralized autonomous organization not to transfer property in which the Democratic People’s Republic of Korea was alleged to have an interest, including the balance held at Arbitrum One address 0x0000000000000000000000000000000000000DA0.

That did not establish that North Korea owned the ether. It created a contested legal claim at the precise point where Arbitrum governance was considering a protocol-led recovery plan.

A recovery asset becomes contested

Arbitrum’s Security Council had moved the ether into the designated address on April 21, 2026. Its disclosure recorded an exact balance of 30,765.667501709008927568 ETH and said another governance action would be required to release it.

The intervention followed the April 18 Kelp DAO incident. Aave’s contemporaneous incident report said a forged cross-chain packet caused Kelp’s Ethereum adapter to release 116,500 rsETH without a corresponding burn on Unichain. The route used a single required decentralized verifier network and no optional verifier, according to that report.

Aave’s analysis also recorded that the attacker supplied 89,567 rsETH across its Ethereum and Arbitrum markets and borrowed 82,650 WETH plus 821 wstETH. Those figures described token quantities observed during the incident; the borrowed balance could continue changing as interest accrued. Aave said its own smart contracts were not compromised.

A recovery proposal published on Arbitrum’s forum sought approval to send the frozen 30,765.67 ETH to a multisignature address controlled by participants in a coordinated remediation effort. Its stated objective was to help restore rsETH backing and address the resulting impairment across affected markets.

The court authorized an unusual form of service

The creditors faced a basic procedural problem: Arbitrum DAO had no conventional headquarters or registered agent identified in their filing. On May 1, 2026, Judge Margaret M. Garnett of the U.S. District Court for the Southern District of New York authorized alternative service.

The approved methods included posting the documents in the governance discussion about transferring the assets, mailing related legal entities and Security Council members, and emailing counsel for certain recipients. The court concluded that the combination was reasonably calculated to notify the DAO.

The order addressed service, not the ultimate ownership or disposition of the ether. The creditors’ notice asserted that the assets were connected to North Korea through the Lazarus Group and sought to apply them toward older judgments. Kelp-related stakeholders, by contrast, were pursuing their return to the recovery pool for users affected by the exploit.

Why the collision mattered

The conflict joined three systems that normally operate on different assumptions: blockchain execution, token-holder governance and court-supervised judgment enforcement.

Arbitrum’s emergency mechanism demonstrated that designated signers could immobilize assets quickly. The subsequent proceeding demonstrated that once those assets were frozen under collective control, courts and private creditors could attempt to treat the DAO as a reachable garnishee. Posting legal process directly into a governance forum also made that forum part of the notice machinery of a federal case.

As of May 3, 2026, the ether remained immobilized, the recovery transfer had not been completed, and no cited order had adjudicated whether the funds belonged to North Korea, exploit victims or another party. The verified development was therefore a restraint and competing claim—not a seizure, payout or final recovery.