Back

North Korea Judgment Creditors Seek 30,765 Ethereum Frozen After rsETH Exploit

At a Manhattan federal court hearing, creditors tied to unpaid North Korea judgments argued the April Aave rsETH exploit should be treated as fraud, a distinction they say could help preserve a freeze on about $71 million in ETH.

ETH
AAVE
RSETH

Fact Check
The claim is confirmed by Aave's own official X post (https://x.com/aave/status/2051329772190347560), two independent primary news outlets (The Block and The Defiant), and CoinDesk. All sources agree on the core facts: Aave LLC filed an emergency motion to vacate a restraining notice served on Arbitrum DAO; the ETH in question (~$71-73M, reflecting live price variation on 30,765 ETH) is tied to the April 18 Kelp DAO exploit; and Aave's central legal argument is that a thief does not acquire lawful ownership of stolen property. The minor discrepancy between '$73 million' (The Block) and '~$71 million' (The Defiant) is attributable to ETH price fluctuation and does not affect the substance of the claim. No conflicting evidence was found.
Summary

A legal dispute in Manhattan federal court continues over roughly 30,765-30,766 ETH frozen after the April 18 rsETH exploit, with reported values around $71 million to $73 million. Lawyers for victims in North Korea terrorism cases argued the exploit should be characterized as fraud rather than theft, saying that distinction could affect whether legal title passed to Lazarus-linked attackers and help preserve the freeze on the assets. According to the new filing, the hackers borrowed about $230 million using unbacked rsETH minted through a cross-chain bridge flaw. Aave has argued the frozen ETH should be used for victim reimbursement, while creditors holding $877 million in default judgments against North Korea are seeking to block transfers and claim the assets.

Terms & Concepts
  • ETH: The native cryptocurrency of the Ethereum blockchain, also called Ether, used for transactions, fees, and smart contract activity.
  • Aave: A DeFi lending protocol that lets users supply and borrow crypto assets through blockchain-based pools.
  • rsETH: A crypto asset involved in the April exploit; in this case, the disputed borrowing allegedly relied on unbacked rsETH created through a cross-chain bridge flaw.