Frozen ETH Transfer Fight Escalates After Kelp Exploit

Frozen ETH Transfer Turns Into A Claim War

The frozen ETH transfer now sits at the center of a much larger contest over control, recovery, and creditor priority. Gerstein Harrow LLP has moved to stop Arbitrum DAO from releasing Ether tied to the Kelp exploit, arguing that its clients already have a superior claim to the funds. That matters because the crypto industry keeps assuming that once assets are frozen, the next step is automatic recovery. It is not. Freezes only pause movement; they do not settle ownership, liability, or jurisdiction. In this case, the legal pressure collides with a live governance process, and that combination can slow recovery even when the underlying assets are already identified.

This is not a simple hacker-vs-protocol story. It is a fight over whether onchain containment can survive offchain enforcement. The assets in question were frozen by Arbitrum after the Kelp exploit, but the law firm’s filing seeks to reroute the outcome through a New York court order. That creates a practical problem for DeFi operators: security councils and DAO votes can immobilize funds, but lawyers can still challenge where those funds go next. For treasury teams and token holders, the message is blunt: technical control and legal control are not the same thing.

What Happened In The Kelp Exploit Case?

The Kelp exploit has already moved beyond the initial incident phase and into asset recovery politics. Recent reporting indicates that Arbitrum Security Council froze 30,766 ETH, valued at roughly $71 million when the freeze occurred, after tracing funds linked to the attack to an Arbitrum One address. Separately, Arbitrum DAO has been weighing a proposal to release those funds into the DeFi United recovery effort, with voting open through May 7. The law firm’s restraining notice now targets that very pathway, aiming to prevent any transfer while the court-backed claim is active. In plain terms, the same Ether is being pulled in two directions: one by governance, one by creditors.

• 30,766 ETH were frozen by Arbitrum’s security process.
• The balance was routed to a frozen intermediary wallet.
• Arbitrum DAO has been considering a transfer for recovery purposes.
• The restraining notice seeks to block movement before governance acts.

That sequence matters because it shows how quickly a DeFi exploit can become a legal asset dispute. The industry often treats frozen funds as a near-term recovery pool. But once a court order enters the picture, the operational timeline changes. Even if DAO participants support release, they now have to weigh contempt risk, creditor arguments, and venue questions. In other words, the freeze solved only the easiest part of the problem.

Why This Matters For DeFi Recovery

The larger issue is not whether one law firm wins a procedural motion. It is whether DeFi can build recovery frameworks that survive competing claims. Legal finality matters as much as technical finality, and that is where many recovery narratives overreach. When a protocol, a DAO, or a security council freezes assets, it creates a temporary fact pattern, not a universal settlement. If multiple parties can credibly claim the same pool, then recovery becomes a contest over sequence, authority, and enforceability. That is especially true when the underlying exploit is alleged to involve North Korea-linked actors, because sanctions exposure and victim compensation claims can overlap in messy ways.

From a structural standpoint, this episode also reinforces a hard truth: governance can coordinate response, but it cannot erase creditor rights. The market likes tidy stories about “community-led recovery,” yet those stories often ignore the legal plumbing underneath. A DAO vote may look decisive onchain, but it can still leave participants exposed if a court later recognizes competing claims. That is the uncomfortable part the market prefers to skip. The lesson is not that recovery is impossible; it is that recovery without legal sequencing is fragile.

What This Means For Investors (Our Take)

For investors, the key takeaway is that frozen assets are not the same as recoverable assets. When a protocol hack becomes a cross-jurisdictional claim battle, the timetable usually stretches and the final distribution often changes. The market should not price every frozen treasury as if it were already a reserve. It should discount for litigation risk, creditor hierarchy, and governance delays. The more complex the claim stack, the less reliable the headline recovery number becomes.

What to watch next is simple: the Arbitrum DAO vote outcome, any court response to the restraining notice, and whether DeFi United can keep its recovery plan intact. If the transfer stalls, the market may need to reassess how often onchain freezes actually translate into usable capital. If the court sides with the claimants, the precedent will matter well beyond Kelp.

Focus: The real story is not the freeze itself — it is who gets paid when the freeze ends.

Mauricio Pompilii Marquez, Macro & Commodities Analyst, The Chain Journal