TLDR
Arbitrum DAO has voted to release about $70 million in frozen ETH to help victims of the Kelp DAO rsETH exploit recover losses.
- The DAO approved sending 30,765 ETH to a DeFi United recovery multisig, with roughly 91% of votes in favor.
- A U.S. federal court restraining order currently blocks moving the funds, citing alleged ties between the exploit and North Koreas Lazarus Group.
- The episode highlights how DAO-admin controls and cross-chain bridge failures can pull DeFi governance into real-world legal battles.
Deep Dive
1. What The DAO Just Approved
Arbitrum DAO voted to release 30,76530,766 ETH, worth around $7071 million, that was frozen after the April Kelp DAO exploit, and send it to a DeFi United recovery wallet managed by Aave Labs, KelpDAO, EtherFi and Certora in a 3-of-4 multisig setup.[^decrypt]
The proposal passed overwhelmingly, with about 182.2 million ARB (around 90.96% of voting power) supporting the release and only negligible direct opposition.[^block]
The ETH came from the attackers funds that Arbitrums Security Council had seized on Arbitrum One after a flaw in Kelp DAOs LayerZero-based bridge allowed minting 116,500 unbacked rsETH and draining around $290 million in ETH.[^cointelegraph]
Arbitrum is positioning itself as the single largest contributor to making Kelp rsETH users whole, using already-seized attacker funds rather than new DAO spending.
2. Why The Funds Are Still Frozen
Despite the DAO vote, a U.S. federal court has issued a restraining notice that bars Arbitrum from moving the 30,766 ETH for now.[^block_court]
Plaintiffs with terrorism-related judgments against North Korea argue the seized ETH is effectively DPRK property, pointing to attributions that the exploit involved the Lazarus Group, and are attempting to claim the assets to satisfy their outstanding awards.[^crypto_news_freeze]
Legal experts warn that anyone in the execution chain who falls under U.S. jurisdiction risks contempt of court if they help move the ETH before the dispute is resolved, regardless of the DAO vote.[^decrypt_full]
The rescue is approved in governance terms but cannot proceed until the U.S. court fight over who legally controls the ETH is settled.
3. Lessons For Arbitrum, DeFi And DAOs
This case shows how powerful Security Council admin controls and centralized bridge configurations can make DAOs legible to courts as identifiable garnishees rather than purely decentralized software.
It also illustrates recovery trade-offs: seizing hacker funds and routing them into a DAO-controlled address enabled restitution, but that same centralization created a clear legal target for third-party creditors.
For DeFi users and delegates, monitoring how Arbitrum adjusts Security Council powers, bridge designs and legal protections around future recoveries will be key to understanding both risk and resilience on the network.
Governance-controlled rescue tools can help victims, but they also increase the chance that off-chain courts will treat DAOs as accountable intermediaries rather than neutral infrastructure.
Conclusion
Arbitrum DAO has clearly signaled its intent to use seized attacker funds to partially recapitalize Kelp DAOs rsETH, but a U.S. court order now dictates when, or even if, that can happen.
The outcome will shape not just compensation for Kelp victims, but also how future DAOs design admin keys, bridge security and legal shields when they take on an active role in incident response.
[^block]: Arbitrum DAO approves 30,765.6 ETH release [^decrypt]: Arbitrum DAO votes to unlock 30,765.67 ETH [^cointelegraph]: Arbitrum vote to release frozen Kelp exploit ETH [^block_court]: North Korea terrorism creditors move to seize Arbitrum-frozen ETH [^crypto_news_freeze]: U.S. court blocks Arbitrum DAO from moving 30,766 ETH [^decrypt_full]: Legal risks around the Kelp exploit recovery
CoinsKid.Com