A U.S. court has now stepped in and effectively frozen Arbitrum DAO’s plan to move a large batch of recovered funds tied to a major hack.
Here’s what happened in simple terms.
Arbitrum had already frozen about 30,766 ETH (roughly $71 million) after a DeFi exploit linked to the Kelp DAO bridge attack. The goal was to later redirect those funds through a recovery proposal approved by the DAO.
But that plan is now on hold.
A U.S. federal court in New York issued a restraining order blocking any movement of those assets. The order came after plaintiffs — victims of past terrorism-related attacks — claimed the funds could be legally tied to North Korea.
Their argument is based on allegations that the stolen crypto is connected to the Lazarus Group, which has been linked in past investigations to major crypto thefts.
Those plaintiffs are already holding over $877 million in judgments against North Korea, and they’re now trying to seize crypto assets under U.S. laws that allow recovery from state sponsors of terrorism.
So now there are two competing paths for the same funds:
- Arbitrum DAO plan: return or recycle the ETH into a recovery system for the DeFi ecosystem
- Court order claim: treat the ETH as recoverable assets for judgment enforcement against North Korea
The DAO had nearly unanimous community support for its recovery proposal, but the legal restraint overrides governance decisions for now.
The funds came from a major exploit involving the Kelp DAO bridge, where attackers drained assets and later moved them across chains in an attempt to hide them. Investigators have pointed to patterns consistent with North Korean-linked hacking activity.
What makes this situation unusual is the overlap:
Normally, DAOs control their own recovery processes. But here, a real-world court has stepped in and essentially paused blockchain governance.
So the key takeaway is simple:
Even in decentralized systems, once funds enter the legal system’s radar — especially in cases involving sanctions or terrorism claims — court orders can override DAO decisions until things are resolved.
 after a DeFi exploit linked to the Kelp DAO bridge attack. The goal was...){kind=link}