Aave news

A federal judge in Manhattan partially unblocked 30,766 ETH (worth $71 million) from Arbitrum DAO for transfer to Aave, but terrorism creditors' legal claims on the funds persist. The order allows an onchain governance vote to move the ether to Aave while ensuring delegates face no liability for initiating the transaction. The funds were frozen after a $292 million Kelp DAO exploit attributed to North Korea's Lazarus Group. Aave argued the ETH belongs to affected users, while plaintiffs claim it is North Korean property under terrorism financing laws. The restraining notice now follows the assets to Aave, which agreed to be bound by it. Funds remain at risk until a full hearing, which has not yet been scheduled. The 30,766 ETH is the largest contribution to the DeFi United recovery effort.

A Manhattan federal judge has allowed Arbitrum DAO to move $71 million in frozen Ether to Aave, modifying a restraining notice tied to a North Korea-linked exploit. The order permits an onchain governance vote to transfer the funds to an Aave-controlled wallet, while preserving the terrorism victims' legal claim on the assets. The decision follows strong support from Arbitrum delegates in an off-chain vote as part of Aave's recovery plan after the Kelp DAO exploit. Aave had filed an emergency motion arguing that restraining the funds could deter future DeFi recovery efforts. The hack left rsETH's backing with a $174.5 million shortfall, and the frozen ETH is seen as a step toward closing that gap.

A Manhattan federal judge has modified a restraining notice to allow Aave to transfer $71 million in frozen ether linked to a North Korean hack from Arbitrum to an Aave LLC wallet, while preserving the legal claims of North Korean terrorism victims on the funds. The order shields participants in the transfer from liability under the notice. The ruling follows an off-chain Arbitrum governance vote supporting the transfer, though a binding onchain vote is still required. The move resolves a standoff amid claims by attorneys for terrorism judgment creditors that the frozen ETH could be seized due to its connection to the Lazarus Group. This action is part of a broader legal strategy targeting North Korean-linked assets in DeFi. Similar creditors have separately sued Railgun DAO and Digital Currency Group, alleging the privacy protocol allowed North Korean hackers to launder funds and that DCG's governance token purchase made it liable.

Mantle tokenholders have approved a proposal authorizing a credit facility of up to 30,000 ETH (worth about $68 million) for Aave DAO to address bad debt from the April rsETH exploit. The proposal, MIP-34, passed in a seven-day Snapshot vote ending Friday, enabling the Mantle Foundation to negotiate and execute agreements with Aave for a loan from the Mantle Treasury, pending Aave's recovery plan and final terms. The credit facility aims to mitigate the impact of the rsETH incident on Aave V3, where an attacker deposited 89,567 unbacked rsETH and borrowed about $190 million, creating potential bad debt estimated between $123.7 million and $230.1 million. The vote marks a shift to a broader remediation phase, with Mantle providing a backstop as Aave works to restore confidence. Galaxy Research noted the exploit pushed Aave's WETH market into a prolonged squeeze, with utilization above 99% for 12.7 days. As of Friday, utilization has cooled to about 91.6%, with 2.02 million WETH supplied and 1.85 million borrowed.

Aave Labs announced a major overhaul of its collateral assessment and listing standards following the $293 million KelpDAO exploit, the largest DeFi hack of 2026. Linda Jeng, chief legal and policy officer, revealed at Consensus Miami that the protocol will now evaluate assets based on interoperability, cybersecurity vulnerabilities, and underlying architecture, in addition to financial risk. Aave will publish a formal playbook for asset issuers and begin analyzing systemic interconnections across DeFi protocols. The exploit involved an attacker minting unbacked rsETH tokens and depositing them as collateral on Aave. The industry responded with 'DeFi United,' a coalition of projects that covered the collateral shortfall, avoiding a government bailout.

Aave Labs has liquidated the Kelp DAO attacker's remaining rsETH positions on Ethereum and Arbitrum, a critical step in the DeFi United recovery plan. The liquidated collateral from the $293 million exploit was transferred to a Recovery Guardian multisig wallet. DeFi United is now only about 10% short of the ETH needed to restore rsETH backing, according to Galaxy Digital's Thaddeus Pinakiewicz. Aave's user funds were unaffected, and the Umbrella insurance mechanism was not used. However, 30,765 ETH frozen by Arbitrum DAO remains in legal limbo after a restraining notice was filed. Aave has filed a motion to vacate, and Arbitrum DAO is voting on whether to release the funds to DeFi United, with over 90% in favor. Voting closes on Friday.

Aave has liquidated the Kelp DAO attacker's remaining rsETH positions as part of a recovery plan following a $292 million exploit. The collateral will be moved to the Recovery Guardian multisig managed by DeFi United, which has raised over $320 million to restore backing and compensate users. Aave temporarily manipulated the rsETH oracle price to create a deficit in the attacker's position, with all adjustments to be reverted after liquidation. The initial attack on April 28 fraudulently minted 116,500 unbacked rsETH via a LayerZero bridge. The DeFi community has united to freeze funds and recover assets, though some frozen funds are tied up in a lawsuit.

Lawyers for victims of North Korean terrorism have escalated efforts to seize $71 million in frozen ether from the Aave hack, arguing in a new court filing that the exploit was fraud, not theft. They claim North Korea obtained title to the assets through deception, akin to a Ponzi scheme, and that under U.S. law, fraudsters can acquire defeasible title to stolen property. The April 18 attack, attributed to North Korea's Lazarus Group, involved minting unbacked rsETH tokens to borrow real ether from Aave's lending protocol. Developers intercepted $71 million before it could be cashed out. The filing also invokes the Terrorism Risk Insurance Act to allow collection from U.S.-held North Korean assets, questioning Aave's standing to challenge the freeze. A hearing is set for May 6.

Aave has filed an emergency motion to vacate a court-ordered freeze on approximately $71 million in ETH that was recovered from a $116,500 rsETH exploit on Kelp DAO's bridge. Aave argues the frozen assets were designated for victim restitution and should not be subject to seizure by outside creditors seeking to attach the funds due to alleged links to North Korea's Lazarus Group. The assets were frozen by Arbitrum's Security Council using emergency powers. Aave's motion challenges both the legal basis for treating stolen assets as attachable property and the ability to serve legal process on a DAO, highlighting governance exposure in DeFi crisis responses. The case underscores a tension in DeFi: users expect emergency intervention during exploits, but such actions create documented control points that courts may target. The outcome could determine whether future recovery efforts face legal challenges or proceed smoothly.

Aave has asked a U.S. federal court to block the seizure of about $71 million in crypto tied to a recent rsETH exploit, arguing the assets belong to users, not North Korea. The assets were frozen by Arbitrum's Security Council after the attack, which allegedly involved North Korea's Lazarus Group. Aave's filing warns that keeping the funds frozen risks irreparable harm to the platform and broader DeFi ecosystem, potentially causing cascading liquidations and liquidity outflows. The outcome could set a precedent for how recovered crypto is handled in future hacks.