Back

Court Freezes $71 Million in Ethereum Linked to North Korea's Lazarus Group

Severity: High (Score: 72.5)

Sources: www.reuters.com, Cryptopolitan, u22280551.ct.sendgrid.net, Mexc.Co, Theblock.Co

Summary

A U.S. federal court has issued a restraining notice preventing Arbitrum DAO from transferring 30,766 ETH (approximately $71.1 million) that was frozen following the Kelp DAO exploit, which resulted in a loss of $292 million. The court action, authorized on May 1, 2026, was initiated by plaintiffs holding nearly $877 million in unpaid judgments against North Korea, asserting that the frozen funds are linked to the Lazarus Group, a state-sponsored hacking collective. The plaintiffs, including U.S. nationals whose family member was killed by North Korean agents, are not directly connected to the Kelp incident but seek to enforce long-standing terrorism-related judgments. The legal framework involves the Foreign Sovereign Immunities Act and the Terrorism Risk Insurance Act, allowing creditors to attach assets tied to a sanctioned state. Arbitrum's governance had planned to allocate the frozen ETH to a recovery initiative for victims of the exploit, but the court's order halts these efforts. The DAO's community overwhelmingly supports the recovery proposal, with voting concluding on May 7, 2026. The situation raises significant questions about the intersection of decentralized finance and U.S. judicial authority. Key Points: • A U.S. court has frozen $71 million in ETH linked to North Korea's Lazarus Group. • Plaintiffs hold nearly $877 million in unpaid judgments against North Korea, unrelated to the Kelp exploit. • The court's restraining order halts Arbitrum DAO's compensation plans for victims of the Kelp DAO hack.

Key Entities

  • Apt-38 (apt_group)
  • Lazarus Group (apt_group)
  • TraderTraitor (malware)
  • Data Breach (attack_type)
  • Aave (platform)
  • Compound (platform)
  • LayerZero (platform)
  • Aave Labs (company)
  • Arbitrum (company)
  • Arbitrum DAO (company)
  • Arbitrum Foundation (company)
  • Certora (company)
  • China (country)
  • Israel (country)
  • Lebanon (country)
  • North Korea (country)
  • United States (country)
  • cryptopolitan.com (domain)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed