Aave moves $71 million in ETH linked to North Korea hack
Judge Margaret Garnett issued a two-page order clearing the way for Aave LLC to move $71 million in frozen ether (ETH) linked to a North Korea hack. The funds are held on Arbitrum and are connected to an exploit attributed to the Lazarus Group, which is identified in court filings as the North Korea-linked actor behind the theft. The matter is described in related court filings.
A series of legal and procedural steps have enabled Aave LLC to move the $71 million in frozen ether (ETH) linked to a North Korea-related hack. Judge Margaret Garnett issued a two-page order that modified an existing restraining notice, allowing the transfer and explicitly shielding initiators, voters, and participants from liability. This legal modification was crucial, as it ensured that none of the involved parties would be considered in violation of the existing asset freeze.
In addition to the court order, an onchain governance vote is necessary to execute the actual transfer of the funds from Arbitrum to a wallet controlled by Aave LLC. This governance mechanism is a key aspect of the decentralized decision-making process within the organization. Supporting this decision, an off-chain Snapshot temperature check among Arbitrum delegates indicated broad support for returning the frozen ETH. The Snapshot tool provides a way for community delegates to express their positions and influence governance without executing onchain transactions. These combined legal and procedural developments have facilitated the planned transfer of the substantial cryptocurrency assets.
Terrorism victims in related litigation have claims totaling roughly $877 million in unpaid judgments against North Korea. The broader litigation includes cases tied to cyber exploits attributed to the Lazarus Group. In January, plaintiffs filed a lawsuit naming Railgun DAO in a separate case. In March, plaintiffs asked a Washington federal court clerk to enter default against Railgun DAO.
A February court filing named Digital Currency Group as a participant through its 2022 purchase of Railgun governance tokens. Also in February, plaintiffs moved to secure USDT that had been seized by the U.S. government via forfeiture proceedings. The Senate Banking Committee announced a markup hearing for the Clarity Act on March 14. The filings cite specific seizures and governance-token purchases related to the disputes. These actions are reflected in the filings and motions connected to the broader set of cases.
Together, the claims, filings, forfeiture motions and scheduled committee markup compose the contemporaneous legal landscape addressed in the court record. The record includes the specific items noted above without projecting outcomes or motives.
A federal judge issued an order that cleared the way for Aave LLC to move a large amount of frozen ether linked in filings to a North Korea cyber exploit, and the order modified a prior restraining notice while providing legal protections for those who initiate, vote on, or participate in the transfer. That judicial action exists alongside broader litigation that includes terrorism victims’ unpaid judgments against North Korea, lawsuits naming a decentralized protocol, filings identifying a digital-asset company through governance-token purchases, forfeiture motions over seized stablecoins, and a Senate Banking Committee markup hearing for the Clarity Act.
