A federal judge just decided that DeFi protocols can move stolen money as long as the victims keep their right to chase it.
The Summary
- Manhattan Judge Margaret Garnett modified a restraining order to let Arbitrum DAO transfer $71 million in ETH tied to a North Korea hack to Aave, while preserving terrorism victims' legal claims on the funds.
- The order shields DAO voters from violating the freeze, creating the first clear precedent for how DAOs can operate under asset freezes without putting token holders at legal risk.
- The legal freeze follows the assets wherever they move, meaning Aave inherits the legal baggage but gains operational flexibility to manage the position.
The Signal
This isn't about whether DeFi can handle dirty money. That question was answered the moment someone deposited the first stolen ETH into a protocol. This is about whether courts understand that frozen assets in DeFi protocols create systemic risk that immobilizing them can make worse.
Judge Garnett's order does something novel. It separates the legal claim from the operational need. The terrorism victims suing to recover funds from the North Korea hack still have their claim. The freeze still exists. But Arbitrum DAO can now vote to move the ETH to Aave without every token holder who votes "yes" becoming a defendant.
"The legal freeze follows the assets as terrorism plaintiffs continue their claim."
Here's why this matters beyond one stolen pile of ETH. DeFi protocols are not banks with customer service desks. When exploit funds sit in a lending pool, they create liquidation risk, interest rate distortion, and governance paralysis. A traditional restraining order says "don't touch this." But in DeFi, not touching something can blow up the entire protocol's risk parameters.
The court effectively said: we understand that moving assets and releasing them are different actions. Aave can receive the ETH and manage it as part of its normal lending operations. The plaintiffs can still chase the money. This isn't permission to wash stolen funds. It's recognition that frozen DeFi positions are not the same as frozen bank accounts.
Key precedents set:
- DAO governance votes can proceed on frozen assets without exposing voters to contempt charges
- Courts can apply restraining orders that follow assets through DeFi protocols rather than paralyzing them
- Operational transfers under protocol rules don't equal releasing claims on stolen funds
The Implication
Watch for other courts to cite this when the next hack hits a major protocol. The precedent here is narrow but useful. It says regulators and judges can enforce claims on stolen crypto without breaking the protocols holding it. That's a more sophisticated approach than we've seen before.
For protocols, this creates a playbook. If you're holding exploit funds under a court order, you can likely argue for operational flexibility as long as the legal claim stays intact. For DAOs, it means governance doesn't freeze just because some of the treasury is under legal dispute.