When crypto moves faster than courts, lawyers start claiming other people's frozen assets.
The Summary
- Gerstein Harrow filed a restraining notice attempting to seize ETH frozen by Arbitrum DAO after the Kelp exploit, claiming their clients are owed compensation by North Korean hackers from *prior, unrelated incidents*
- Aave filed an emergency motion to lift the restraining order, arguing a thief doesn't gain lawful ownership by stealing
- The law firm has used this strategy before, filing similar cases claiming clients have rights to frozen funds stolen by North Korea
The Signal
Gerstein Harrow is trying to grab frozen ETH from the Kelp exploit by arguing their clients, victims of previous North Korean hacks, have a superior claim to the funds. The legal theory: if North Korea stole from our clients before, and North Korea is suspected in this Kelp hack, then our clients get first dibs on any frozen North Korean-linked funds, regardless of who actually lost money in this specific exploit.
Aave responded with an emergency motion calling the argument absurd. Their position: "a thief doesn't gain lawful ownership of property by stealing it." The stolen ETH doesn't belong to North Korea just because they allegedly stole it. It belongs to the Kelp DAO victims who lost it in this exploit. Gerstein Harrow's claim, Aave argues, "defies logic, common sense and the law."
"A thief doesn't gain lawful ownership of property by stealing it."
This isn't Gerstein Harrow's first rodeo. The firm has filed similar cases in the past, targeting frozen crypto assets with suspected North Korean ties. The pattern: find frozen funds, claim a North Korean connection, assert their clients' prior judgments against the DPRK give them rights to the assets. It's legal arbitrage at the intersection of crypto speed and court slowness.
What makes this case messy is the chain of custody problem crypto creates:
- Arbitrum DAO froze the funds after the Kelp exploit
- The actual Kelp victims haven't been made whole
- Gerstein Harrow's clients lost money in different, earlier hacks
- North Korea is the common thread, but proving asset lineage across exploits is nearly impossible
The traditional legal system assumes assets sit still while courts decide who owns them. Crypto assets move across chains, protocols, and jurisdictions in minutes. By the time a restraining order is filed, the funds might have already been mixed, bridged, or frozen by a DAO vote. Gerstein Harrow is exploiting the gap between blockchain finality and legal finality.
The Implication
If Gerstein Harrow succeeds, expect a gold rush of opportunistic legal claims on every frozen crypto asset with a whiff of North Korean involvement. Law firms will race to file restraining notices before actual victims can recover funds, turning every exploit into a multi-party legal brawl. DAOs and protocols that freeze hacker funds are about to become litigation honeypots.
For DAOs like Arbitrum, this creates a perverse incentive: freezing stolen funds might not protect victims, it might just create a target for unrelated creditors. The smarter move might be instant, automated victim reimbursement before any court can issue a restraining order. Speed beats legal process when the legal process rewards whoever files paperwork first.