KelpDAO Files $292M Lawsuit Against LayerZero and CEO Over rsETH Bridge Exploit

The Escalation of the KelpDAO and LayerZero Dispute

The conflict between liquid restaking protocol KelpDAO and cross-chain messaging network LayerZero has transitioned from a public dispute into a formal legal proceeding. Filed in British Columbia, the lawsuit names both LayerZero and CEO Bryan Pellegrino, targeting accountability for an April exploit that drained roughly 116,500 rsETH, valued at approximately $292 million at the time.

According to the public account of the filing, KelpDAO alleges that LayerZero failed to adequately disclose risks and weaknesses associated with its technology and did not secure the infrastructure relied upon by its verifiers. Furthermore, KelpDAO claims that LayerZero explicitly endorsed the bridge setup used during the incident. LayerZero leadership has forcefully rejected these allegations, with CEO Bryan Pellegrino labeling the lawsuit as meritless and vowing to defend himself and the company in court.

Core Technical Disagreements and Vulnerability Claims

The central debate of the lawsuit revolves around infrastructure configuration and accountability for cross-chain security. KelpDAO argues that LayerZero shares responsibility for the security breakdown that allowed attackers to push a forged transaction. Investigators and security reports have previously noted that the bridge involved a single-verifier or 1-of-1 decentralized verifier network (DVN) configuration.

LayerZero has maintained that the exploit could have been prevented if KelpDAO had deployed a more hardened, multi-verifier configuration requiring independent entities to agree on cross-chain messages. LayerZero asserts that a single-verifier setup created a localized point of failure, shifting blame back onto the protocol's implementation choices rather than a systemic core failure of the underlying messaging protocol.

• The Incident: An April exploit drained 116,500 rsETH valued at approximately $292 million.
• The Plaintiff's Stance: KelpDAO claims LayerZero failed to secure infrastructure and approved the bridge setup in writing.
• The Defendant's Stance: LayerZero and CEO Bryan Pellegrino call the suit meritless, citing configuration choices as the root cause.
• Legal Jurisdiction: The civil claim was filed in British Columbia, Canada.

Market Implications for DeFi and Cross-Chain Protocols

This legal confrontation establishes a significant precedent for the decentralized finance (DeFi) sector, particularly regarding shared infrastructure and multi-protocol integrations. As protocols increasingly rely on external interoperability layers and cross-chain bridges to synchronize assets across networks, questions of legal liability during exploits remain largely untested.

For investors, founders, and executives, the outcome of this litigation could redefine how partnerships, risk disclosures, and service-level agreements are structured between base-layer infrastructure providers and application-layer protocols. Unresolved ambiguities regarding who bears responsibility—the infrastructure creator or the deploying protocol—introduce unique legal and operational risks across the entire web3 ecosystem.

What Market Participants Should Watch

As the legal process moves forward in the British Columbia court system, stakeholders should monitor several critical developments:

• Court Precedents: Any preliminary rulings or motion decisions regarding liability attribution in shared cryptographic infrastructure.
• Ecosystem Standards: Potential shifts in how cross-chain providers enforce security configurations, such as mandatory multi-DVN requirements.
• Protocol Risk Management: How other liquid restaking and cross-chain applications audit their legal exposure and technical dependencies.

Read the original details and updates directly on Cointelegraph.