Arbitrum's decentralised governance body voted on May 7, 2026 to release approximately $70 million in ETH to DeFi United, a multi-protocol rescue fund set up after the Kelp DAO exploit drained roughly $292 million from the liquid restaking protocol in April. The vote passed with overwhelming support: in the first hour alone, 16.9 million ARB voted in favour with zero recorded opposition. But the funds are not moving. Six days before the vote closed, the U.S. District Court for the Southern District of New York (SDNY) issued a restraining order blocking any transfer, obtained by families of North Korean terrorism victims who claim the frozen ETH qualifies as North Korean state property.

The legal conflict puts two sets of claimants on a collision course: DeFi users who lost funds in the Kelp hack and want the ETH routed into a recovery pool, and plaintiffs holding a $330 million court judgment against Pyongyang from a 2015 ruling. Those plaintiffs, identified as Han Kim and Yong Seok Kim, are relatives of a South Korean minister killed by North Korea. Their combined creditor claims, excluding interest, exceed $877 million. Their lawyers argue that because U.S. authorities and LayerZero have preliminarily attributed the Kelp exploit to North Korea's Lazarus Group, the recovered ETH constitutes assets of a sanctioned state and can be seized under the Foreign Sovereign Immunities Act and the Terrorism Risk Insurance Act. Kelp DAO itself has disputed that attribution, arguing that a vulnerability in LayerZero's default settings was the root cause of the exploit rather than a state-directed attack.

Aave, one of the co-founders of DeFi United alongside Kelp DAO, LayerZero, EtherFi, and Compound, filed an emergency motion to vacate the order and secured a hearing before Judge Margaret Garnett. In its filing, Aave argued the frozen ETH belongs to protocol users, not to North Korea or any affiliated entity. "No one would dare to stop a thief from stealing funds or property if the reward for being a Good Samaritan was a legal battle," the filing warned, describing the restraining order as "catastrophic" for the broader recovery effort. Aave founder Stani Kulechov was more direct in his personal statement, rejecting what he called "the baseless claim that stolen property title belongs to the thief."

The 30,766 ETH at the centre of the dispute was frozen by Arbitrum's Security Council on April 20, two days after the exploit, using emergency governance powers to move attacker-controlled funds into a wallet accessible only through a DAO vote. That vote happened; the court order is what stands in the way now. Attorney Gabriel Shapiro offered a pointed summary of the current legal posture: "Arbitrum DAO is not allowed to do anything with the KelpDAO funds for now, until a divestiture hearing." The frozen amount represents roughly 25 percent of total exploit losses, and it is the single largest planned contribution to DeFi United, which has raised more than $311 million in pledges from its five founding members and a broader coalition of external contributors including Consensys, Lido, Circle Ventures, the Babylon Foundation, Renzo, the Avalanche Foundation, the Solana Foundation, and Justin Sun. Kulechov himself pledged 5,000 ETH.

In a notable on-chain footnote, the Kelp DAO exploiter used their frozen ETH to vote in favour of the DeFi United proposal in Arbitrum governance. The vote carried no practical effect since those funds remain locked, but it underscored the degree to which DeFi governance systems remain accessible to anyone holding the underlying tokens, regardless of how they obtained them.

For users in South Asia, Africa, and beyond, the case sets a troubling precedent. Kelp DAO was founded in Bengaluru in 2023 by Amitej Gajjala, an alumnus of IIT Madras and IIM Calcutta, and Dheeraj Borra, an alumnus of IIT Kharagpur and UT Austin, both of whom also co-founded liquid staking platform Stader Labs. Their protocol became a major access point for liquid restaking across South Asia, letting users deposit liquid staking tokens through Kelp, receive rsETH in return, and gain restaking exposure via EigenLayer. Before the exploit, Kelp DAO held approximately $1.6 billion in total value locked. The collapse of rsETH's backing triggered more than $13 billion in TVL outflows from connected protocols within 48 hours. For Indian users already navigating a 30 percent crypto tax regime and anti-money laundering compliance obligations, a U.S. court order blocking recovery of stolen funds adds a new and unfamiliar risk: extraterritorial legal action rooted in American foreign policy law.

African DeFi communities are watching closely too. Outlets including BitKE covered the original exploit, reflecting real exposure across Nigeria, Kenya, and South Africa, where liquid staking products have gained ground as yield tools amid local currency depreciation. The prospect of SDNY freezing a DAO treasury based on geopolitical claims directly challenges the narrative that decentralised governance offers an alternative to jurisdictionally constrained financial systems.

The immediate question is whether Judge Garnett lifts the restraining order following the emergency hearing, which was scheduled for approximately May 7 to 8, 2026. If she does not, DeFi United's timeline for restoring rsETH backing slips further, and Kelp DAO's pivot to Chainlink's CCIP bridge, announced May 5, cannot fully restore user confidence while the recovery fund remains stuck in litigation. The longer-term question, one with consequences well beyond this case, is whether DAO treasuries holding assets tied to state-attributed exploits are permanently exposed to U.S. court reach, no matter where their users live. Legal observers expect the dispute to accelerate DAO formation in jurisdictions outside the United States, with the UAE, Singapore, and the Cayman Islands emerging as likely destinations for protocols seeking to insulate their governance structures from American foreign policy litigation.