US Court Rules on Arbitrum DAO Recovery of Stolen Assets

Judge Margaret Garnett grants safe harbor to Arbitrum DAO members, allowing the transfer of stolen rsETH funds back to Aave despite North Korean claims.

Judge Margaret Garnett’s decision on May 9 allows assets to be transferred to a recovery wallet controlled by Aave as part of the process to recover funds stolen during the 2024 rsETH attack.

The case has gained significant attention across the DeFi sector, as it directly addresses how US courts can influence the governance of DAO structures and on-chain voting processes.

Court Provides Protection for DAO Participants

One of the most critical elements of the ruling is the so-called “safe harbor” protection for members and delegates of the Arbitrum DAO. The court explicitly stated that participants in the governance vote will not bear legal liability for supporting the transfer or executing the decision on-chain.

This marks a pivotal moment for the DeFi industry. A previous court order had effectively paralyzed the Arbitrum DAO due to concerns that voters could be accused of the wrongful transfer of assets.

A preliminary Snapshot vote already showed nearly unanimous community support for returning the funds to Aave. Following the court’s ruling, a final on-chain vote is expected to proceed.

The North Korean Connection Complicates the Case

The legal dispute became considerably more complex after lawyers representing victims of North Korean terrorist activities attempted to block the funds.

They argued that because the hack was linked to the Lazarus Group, the Ethereum-based assets should be considered the property of North Korea. However, Aave and the affected users presented a different argument: they maintained that the funds never legally belonged to North Korea and instead represent stolen property that must be returned to its original owners.

The court has accepted this logic for now, authorizing the transfer to Aave. Nevertheless, the judge did not permanently dismiss the victims’ claims against North Korea, meaning the dispute over the funds could persist even after the transfer is completed.

DeFi Enters a New Legal Era

This case is viewed as part of a broader trend where US courts and regulators are increasingly active in pursuing assets linked to North Korean cyber operations.

The same group of plaintiffs has previously taken action against other DeFi projects, including the privacy protocol Railgun DAO, as well as various companies connected to the crypto industry.

For the market, however, the primary takeaway is different: US courts are beginning to establish a functional legal framework for interacting with DAO structures. This shift could fundamentally change how decentralized protocols manage assets, voting, and liability in the future.