Key Takeaways:
ZachXBT named Gerstein Harrow LLP for submitting pretend DPRK claims to grab $71M in frozen KelpDAO funds. Lazarus Group has stolen over $6 billion since 2017 and triggered 76% of all 2026 crypto hack losses. ZachXBT has proposed a group DAO to counter the agency legally, as restoration for precise victims stays blocked.
A Authorized Scheme Constructed on Outdated Judgments
The goal is Gerstein Harrow LLP, a boutique litigation agency making an attempt to assert roughly $71 million in frozen ether ( ETH) related to the April 2026 KelpDAO exploit. The technique rests on a 2015 U.S. courtroom judgment from the Han Kim et al. case in opposition to North Korea, a ruling that stems from the kidnapping of a South Korean reverend in 2000 and has no direct connection to the present hack.
Lazarus Group, the North Korean state-backed hacking collective, is suspected of draining roughly $290 million from KelpDAO on April 18, 2026, by exploiting a vulnerability in its Layerzero V2 bridge. The Arbitrum Safety Council responded by freezing 30,766 ETH value roughly $71 million in an emergency onchain motion designed to forestall additional laundering.
Gerstein Harrow LLP has stepped in to argue that the frozen funds must be redirected to fulfill the 2015 judgment, successfully inserting its purchasers forward of the particular 2026 hack victims in any restoration queue.
“Pure Evil,” ZachXBT’s Verdict
ZachXBT, whose onchain work was instrumental in constructing the proof base that led to the freeze, was unsparing in his evaluation. “This can be a predatory U.S. legislation agency with a method that’s pure evil,” he wrote on X whereas additionally criticizing the agency for leveraging analysis he produced.
The frustration throughout the crypto group is compounded by what the tactic achieves in follow because it clogs the authorized restoration course of, buys time for hackers to maneuver remaining funds, and leaves real victims ready. ZachXBT individually proposed that the group type a decentralized autonomous group ( DAO) to take coordinated authorized motion in opposition to the agency, a suggestion that drew quick and widespread help.
A Rising Authorized Entrance within the Hack Wars
The broader context makes the scheme particularly troubling, on condition that North Korea’s Lazarus Group has stolen over $6 billion in crypto since 2017, accounting for 76% of all crypto hack losses recorded up to now in 2026. The KelpDAO exploit is the second main Lazarus operation inside weeks, with roughly $285 million taken from Drift Protocol in early April.
Because the KelpDAO fallout continues, the exploitation of frozen asset swimming pools with unrelated authorized claims introduces a brand new and troubling dimension to the hack restoration downside, one that may play out in courtrooms, not simply on the blockchain. Whether or not the frozen $71 million finally reaches precise KelpDAO victims or will get diverted via the courts stays unresolved.
