North Korea-linked creditors target frozen Kelp DAO funds

Plaintiffs holding nearly $877 million in unpaid U.S. court judgments against North Korea are attempting to seize about 30,766 ether (roughly $71 million) frozen on the Arbitrum network in respect to the Kelp DAO exploit, setting up a legal clash between sanctions enforcement and decentralized finance governance.

The effort follows a restraining notice authorized by a U.S. federal court in New York on April 30 and served to the Arbitrum DAO via its governance forum, according to reporting by The Block and forum records.

The plaintiffs are not tied to the exploit involving Kelp DAO. Instead, they are long-standing creditors seeking to enforce terrorism-related judgments against Pyongyang.

The legal action combines three separate U.S. court judgments tied to attacks attributed to or linked with North Korea.

These include the killing of Reverend Kim Dong-shik, alleged support for Hezbollah during the 2006 Lebanon war, and the Lod Airport massacre.

Together, the judgments exceed $877 million before interest and remain unpaid, according to court records.

Crypto attribution creates a new enforcement path

The case hinges on attribution of the underlying exploit.

Blockchain firm LayerZero said the Kelp DAO-related breach was linked to the Lazarus Group, a unit long associated with state-backed cyber theft.

In its incident analysis, LayerZero said the failure stemmed from system design, noting:

Separately, the company stated the incident was isolated, saying:

U.S. authorities have previously tied the same hacking apparatus to broader campaigns. The Federal Bureau of Investigation said DPRK-linked actors were responsible for “high-profile international cryptocurrency heists.”

Following the exploit, Arbitrum’s Security Council froze the funds after tracing them to addresses associated with the attacker, according to on-chain data and public disclosures.

Kelp DAO governance vote collides with court order

The legal action arrives as Arbitrum governance considers a proposal to transfer the frozen funds to a recovery initiative backed by Aave Labs, Kelp DAO, LayerZero, EtherFi, and Compound.

The plan would compensate users affected by the exploit and stabilize Kelp DAO’s ecosystem, according to governance materials.

However, the restraining notice bars any transfer while litigation proceeds, creating a direct conflict between decentralized governance and court authority.

A test case for DeFi and sanctions enforcement

The dispute highlights unresolved legal questions about how decentralized systems interact with traditional courts.

At its core is a novel issue: whether crypto assets linked—through attribution—to a sanctioned state can be seized to satisfy long-standing terrorism judgments.

For victims, blockchain traceability offers a rare enforcement opportunity. For DeFi protocols, the case raises the prospect that governance decisions could carry legal consequences beyond code.

The Arbitrum vote is set to close May 7, while the restraining notice remains in effect pending further proceedings.

The smartest crypto minds already read our newsletter. Want in? Join them.