A new legal battle is unfolding in the aftermath of one of 2026’s largest decentralized finance (DeFi) hacks. A U.S.-based law firm is attempting to claim tens of millions of dollars in frozen Ether tied to the Kelp DAO exploit, arguing that the funds belong to its clients rather than victims of the attack. The move has sparked controversy across the crypto industry and raised deeper questions about ownership, restitution, and the limits of decentralization.
Background: The $292 Million Kelp DAO Hack
The dispute stems from the April 2026 hack of Kelp DAO, a liquid restaking protocol built on Ethereum infrastructure. Attackers exploited a vulnerability in the platform’s cross-chain messaging system, allowing them to siphon off approximately $292-$293 million in digital assets.
Investigators and blockchain security firms quickly linked the exploit to North Korean state-backed hackers, specifically the Lazarus Group and its subunit TraderTraitor. The attackers reportedly manipulated cross-chain verification processes, enabling fraudulent transactions that appeared legitimate to the system.
The scale of the breach made it one of the largest DeFi exploits of the year, contributing to a surge in crypto-related cybercrime attributed to North Korean actors.
Arbitrum Freezes $70M+ in Ether
In response to the attack, the Arbitrum network’s Security Council took emergency action. It froze 30,766 Ether worth roughly $70-73 million, linked to wallets associated with the exploit.
The funds were moved to a restricted intermediary wallet, preventing the attackers from accessing them. While this intervention helped secure a portion of the stolen assets, it also ignited a philosophical debate within the crypto community.
Critics argued that freezing funds contradicts the decentralized ethos of blockchain systems, while supporters said it was necessary to protect users and maintain network integrity.
At the same time, DeFi platforms exposed to Kelp DAO’s tokens faced ripple effects, including bad debt and liquidity disruptions.
Law Firm Seeks Control of Frozen Assets
The controversy deepened when Gerstein Harrow LLP stepped in with a legal claim over the frozen Ether. The firm represents clients who hold longstanding U.S. court judgments against North Korea totaling more than $877 million.
According to the firm, the frozen crypto assets qualify as property linked to the Democratic People’s Republic of Korea (DPRK), given the alleged involvement of North Korean hackers in the exploit.
To enforce its claim, the firm obtained a New York court order that includes a restraining notice and writs of execution aimed at blocking any transfer of the frozen Ether.
In simple terms, the firm is attempting to redirect the funds away from DeFi victims and toward its own clients, arguing that the assets should be used to satisfy existing legal judgments against North Korea.
Clash Between Legal Claims and DeFi Victims
The law firm’s move has created a direct conflict between two groups of claimants:
- Victims of the Kelp DAO hack, who lost funds in the exploit
- Plaintiffs who previously won legal judgments against North Korea
Critics within the Arbitrum community argue that allowing the law firm to seize the Ether would effectively shift losses from one group of victims to another.
Some community members have described the approach as unjust, noting that DeFi users affected by the hack are already victims of cybercrime. Blocking the return of funds, they argue, compounds the harm rather than resolving it.
On the other hand, the law firm maintains that U.S. court judgments grant its clients a legitimate legal claim over assets tied to the DPRK, regardless of how those assets were obtained.
Potential Delays in Fund Recovery
The legal intervention could significantly delay efforts to return funds to affected users.
Prior to the court action, proposals were already in motion within the Arbitrum ecosystem to unfreeze the Ether and redirect it toward recovery initiatives. One such proposal involved compensating affected token holders and stabilizing the DeFi ecosystem.
However, if the court order holds, those plans may be stalled indefinitely. This uncertainty adds pressure to an already fragile recovery process, especially as interconnected DeFi platforms continue to deal with the fallout.
Broader Implications for Crypto Governance
The dispute highlights a growing tension between traditional legal systems and decentralized finance.
On one side, courts and legal institutions are asserting jurisdiction over digital assets, especially when tied to sanctioned entities or state actors. On the other, blockchain ecosystems operate on principles of decentralization, autonomy, and community governance.
This case also raises difficult questions:
- Who owns stolen crypto once it is frozen?
- Should legal judgments override on-chain governance decisions?
- How should decentralized platforms handle assets linked to nation-state actors?
The answers are far from clear, and the outcome of this case could set a precedent for future disputes involving crypto assets and international claims.
North Korea’s Expanding Role in Crypto Crime
The incident also underscores the growing role of North Korean-linked groups in global cybercrime.
In April alone, such actors were linked to at least $578 million in crypto theft across major incidents. Their tactics have evolved beyond simple exploits to include long-term infiltration, social engineering, and complex laundering strategies.
Security experts warn that these groups are becoming more sophisticated and persistent, posing ongoing risks to DeFi platforms and the broader crypto ecosystem.
A Defining Moment for DeFi
The battle over the frozen Ether from the Kelp DAO exploit represents more than a legal dispute. It is a defining moment for how the crypto industry handles ownership, accountability, and justice in a decentralized world.
If the law firm succeeds, it could reshape expectations around asset recovery and legal enforcement in crypto. If DeFi governance prevails, it may reinforce the autonomy of blockchain communities.
Either way, the case illustrates a critical reality: as digital assets grow in value and importance, they are increasingly intersecting with traditional legal frameworks. And when those worlds collide, the outcome is rarely simple.
