Aave Enters Legal Battle Over Recovery of $71 Million in Assets Frozen Following Kelp DAO Hack

Aave LLC has recently filed an emergency application with the court to unfreeze $71 million worth of Ethereum (ETH) related to the Kelp DAO hack. This move is interpreted as a key step to protect the protocol's asset recovery rights amidst the legal battle following the massive security incident in April 2026. Aave has made its position clear that the assets in question should be used for hack victim recovery and user protection.

Arbitrum DAO cannot take any action regarding the current Kelp DAO funds until a sale hearing is held. This freeze carries substantial legal binding force.

The incident began on April 18, 2026, when attackers linked to North Korea's Lazarus Group stole approximately $292 million worth of rsETH through Kelp DAO's LayerZero bridge. It was revealed that the attackers used a sophisticated off-chain infrastructure attack method, seizing internal RPC nodes and launching Distributed Denial of Service (DDoS) attacks on external nodes instead of attacking the smart contracts themselves. A portion of the stolen funds, 30,700 ETH, is currently frozen on the Arbitrum network.

Legal Issues and Asset Seizure Attempts

Attorney Charles Gerstein of the U.S. law firm Gerstein Harrow LLP served a notice of asset restraint and a writ of execution to Arbitrum DAO on May 1, 2026, following approval from the U.S. District Court for the Southern District of New York. They are attempting to use the frozen ETH, worth $71 million, to satisfy separate judgment debts related to North Korea. This has raised concerns that assets belonging to hack victims could be diverted as a means to resolve third-party legal disputes.

• The stolen rsETH accounts for approximately 18% of the total circulating supply and was used as collateral on several lending platforms.
• Immediately after the incident, Aave froze rsETH and wrsETH deposit assets in several V3 markets and adjusted the LTV to 0.
• On-chain analyst ZachXBT criticized this legal attempt as 'predatory,' pointing out it is an act of trying to intercept publicly disclosed funds.

Aave's Total Value Locked (TVL) plummeted by approximately $6 billion following the hack, dealing a significant blow to market confidence. According to a report by LlamaRisk, the potential scale of bad debt in the lending market is estimated to range from a minimum of $123.7 million to a maximum of $230.1 million, depending on liquidation efficiency. Aave LLC's emergency application is evaluated as an essential step to minimize these financial risks and restore the health of the protocol.

Kelp DAO suspended rsETH contracts on the mainnet and several Layer 2 (L2) networks immediately after the incident and began a root cause analysis with LayerZero and security experts. LayerZero emphasized that the incident was not due to a flaw in its own smart contracts, but rather a Single Point of Failure (SPOF) in the architectural design of the application layer. While Kelp DAO had marketed rsETH as the same asset across all chains, this incident has once again highlighted the vulnerabilities of cross-chain infrastructure.

Various proposals are being discussed in the Aave governance forum to resolve the situation, with WETH interest rate adjustments and borrowing restrictions implemented immediately. Investors are closely watching how the protocol responds, noting that this legal dispute could directly impact the price volatility of the AAVE token. Within the community, discussions are active regarding technical asset recovery methods in addition to legal responses.

Future Outlook and Regulatory Implications

The final ruling in this case is expected to serve as an important precedent for whether third-party legal claims can take priority during a DeFi protocol's recovery of hacked funds. If the court rules in favor of Aave, the protocol's control over assets and governance autonomy will be strengthened; however, a contrary ruling could create a dangerous situation where hacked assets are assigned to external creditors. This is seen as a watershed moment that will shape the future DeFi regulatory environment.

• The asset freeze decision by the U.S. District Court for the Southern District of New York is recorded as a case of direct judicial intervention in DeFi governance.
• Security experts advise that strengthening the security of off-chain RPC nodes and introducing multi-signature systems are key to preventing similar incidents in the future.
• The cooperation between Aave and Arbitrum DAO is cited as a major variable that will determine the speed of asset recovery.

The legal battle between Aave LLC and Attorney Gerstein's side is expected to reach a turning point at a sale hearing scheduled for mid-May 2026. Industry experts analyze that this case goes beyond a simple hack, raising fundamental questions about the legal status and ownership of DeFi assets. Market participants are keeping a close eye on the court's next orders and further actions from Aave governance.