A lawyer representing families of North Korean terrorist attack victims filed a restraining notice against Arbitrum's DAO to seize 30,765 ETH frozen after the rsETH exploit last month. The move hinges on alleged connections between the attack and DPRK-linked hacking groups, particularly Lazarus Group, which the families claim entitles them to enforce decades-old judgments against North Korea.

The seized ETH, currently locked on Arbitrum following the rsETH incident, represents approximately $80 million at current prices. The families argue that under U.S. law, assets linked to North Korean cyber operations can be claimed as restitution for past terrorist activities. The restraining notice, filed in New York, aims to prevent the Arbitrum DAO from unfreezing or redistributing the funds before the legal claim can be adjudicated.

This represents an unprecedented intersection of crypto protocol governance, on-chain forensics, and international sanctions law. The rsETH exploit, attributed to Lazarus Group by some security researchers, drained significant liquidity from Arbitrum's ecosystem last month. The frozen funds remain under community control pending resolution of competing claims between victims and the protocol's stakeholders.

The Arbitrum DAO faces pressure from multiple directions. Protocol contributors and depositors want their assets restored. The victim families seek legal recovery. Arbitrum's governance structure, built on community voting, has no clear mechanism for handling assets claimed under international law.

Lazarus Group, widely attributed to North Korea's intelligence services, maintains an active history targeting crypto exchanges and protocols. Past operations include the 2014 Sony hack and the $625 million Ronin Protocol bridge theft in 2022. If forensic evidence links the rsETH exploit directly to the group, it strengthens the victims' legal position substantially.

The case tests whether decentralized protocol governance can coexist with national security enforcement. It also highlights how Layer 2 protocols like Arbitrum must navigate regulatory compliance despite their decentralized architecture.

WHY IT MATTERS: This case establishes a legal precedent for se