> ## Content Index
> Fetch the complete content index at: https://wire.fourthweb.ai/llms.txt
> Use this file to discover other available public pages before exploring further.

# Law Firm Claims $5M in Frozen Hacker Funds Before Victims Do
- URL: https://wire.fourthweb.ai/law-firm-claims-5m-in-frozen-hacker-funds-before-victims-do/
- Published: 2026-05-10T05:30:46.000Z
- Updated: 2026-05-10T05:30:47.000Z
- Description: When crypto moves faster than courts, lawyers start claiming other people's frozen assets.
- Author: Travis Wright
- Tags: Real World Assets, Tokenized Assets, DeFi, Institutional Crypto, Ethereum

**When crypto moves faster than courts, lawyers start claiming other people's frozen assets.**

### The Summary

- [Gerstein Harrow filed a restraining notice](https://cointelegraph.com/news/law-firm-tries-to-claim-kelp-exploit-eth-because-clients-owed-by-dprk?utm%5Fsource=rss%5Ffeed&utm%5Fmedium=rss&utm%5Fcampaign=rss%5Fpartner%5Finbound) attempting to seize ETH frozen by Arbitrum DAO after the Kelp exploit, claiming their clients are owed compensation by North Korean hackers from \*prior, unrelated incidents\*
- [Aave filed an emergency motion](https://cointelegraph.com/news/aave-asks-court-to-lift-restraining-notice-on-frozen-kelp-exploit-ether?utm%5Fsource=rss%5Ffeed&utm%5Fmedium=rss&utm%5Fcampaign=rss%5Fpartner%5Finbound) to lift the restraining order, arguing a thief doesn't gain lawful ownership by stealing
- [The law firm has used this strategy before](https://cointelegraph.com/news/law-firm-tries-to-claim-kelp-exploit-eth-because-clients-owed-by-dprk?utm%5Fsource=rss%5Ffeed&utm%5Fmedium=rss&utm%5Fcampaign=rss%5Fpartner%5Finbound), filing similar cases claiming clients have rights to frozen funds stolen by North Korea

### The Signal

[Gerstein Harrow is trying to grab frozen ETH from the Kelp exploit](https://thedefiant.io/news/defi/lawyer-attempts-to-seize-frozen-eth-linked-to-kelp-exploit-from-arbitrum-dao?ref=wire.fourthweb.ai) by arguing their clients, victims of previous North Korean hacks, have a superior claim to the funds. The legal theory: if North Korea stole from our clients before, and North Korea is suspected in this Kelp hack, then our clients get first dibs on any frozen North Korean-linked funds, regardless of who actually lost money in this specific exploit.

[Aave responded with an emergency motion](https://cointelegraph.com/news/aave-asks-court-to-lift-restraining-notice-on-frozen-kelp-exploit-ether?utm%5Fsource=rss%5Ffeed&utm%5Fmedium=rss&utm%5Fcampaign=rss%5Fpartner%5Finbound) calling the argument absurd. Their position: "a thief doesn't gain lawful ownership of property by stealing it." The stolen ETH doesn't belong to North Korea just because they allegedly stole it. It belongs to the Kelp DAO victims who lost it in this exploit. Gerstein Harrow's claim, Aave argues, "defies logic, common sense and the law."

> "A thief doesn't gain lawful ownership of property by stealing it."

This isn't Gerstein Harrow's first rodeo. [The firm has filed similar cases](https://cointelegraph.com/news/law-firm-tries-to-claim-kelp-exploit-eth-because-clients-owed-by-dprk?utm%5Fsource=rss%5Ffeed&utm%5Fmedium=rss&utm%5Fcampaign=rss%5Fpartner%5Finbound) in the past, targeting frozen crypto assets with suspected North Korean ties. The pattern: find frozen funds, claim a North Korean connection, assert their clients' prior judgments against the DPRK give them rights to the assets. It's legal arbitrage at the intersection of crypto speed and court slowness.

What makes this case messy is the chain of custody problem crypto creates:

- Arbitrum DAO froze the funds after the Kelp exploit
- The actual Kelp victims haven't been made whole
- Gerstein Harrow's clients lost money in different, earlier hacks
- North Korea is the common thread, but proving asset lineage across exploits is nearly impossible

The traditional legal system assumes assets sit still while courts decide who owns them. Crypto assets move across chains, protocols, and jurisdictions in minutes. By the time a restraining order is filed, the funds might have already been mixed, bridged, or frozen by a DAO vote. Gerstein Harrow is exploiting the gap between blockchain finality and legal finality.

### The Implication

If Gerstein Harrow succeeds, expect a gold rush of opportunistic legal claims on every frozen crypto asset with a whiff of North Korean involvement. Law firms will race to file restraining notices before actual victims can recover funds, turning every exploit into a multi-party legal brawl. DAOs and protocols that freeze hacker funds are about to become litigation honeypots.

For DAOs like Arbitrum, this creates a perverse incentive: freezing stolen funds might not protect victims, it might just create a target for unrelated creditors. The smarter move might be instant, automated victim reimbursement before any court can issue a restraining order. Speed beats legal process when the legal process rewards whoever files paperwork first.

### Sources

[CoinTelegraph](https://cointelegraph.com/news/aave-asks-court-to-lift-restraining-notice-on-frozen-kelp-exploit-ether?utm%5Fsource=rss%5Ffeed&utm%5Fmedium=rss&utm%5Fcampaign=rss%5Fpartner%5Finbound) | [The Defiant](https://thedefiant.io/news/defi/lawyer-attempts-to-seize-frozen-eth-linked-to-kelp-exploit-from-arbitrum-dao?ref=wire.fourthweb.ai) | [RWA Times](https://rwatimes.substack.com/p/us-law-firm-moves-to-block-frozen)