Skip to content
Bridge

KelpDAO Files Lawsuit Against LayerZero Over $292M rsETH Bridge Exploit

TL;DR Evercrest Technologies, the company behind KelpDAO, has filed a civil claim against LayerZero entities and co-founder Bryan Pellegrino. The lawsuit concerns the April exploit that drained 116,500 rsETH, worth about $292 million at the time. KelpDAO alleges LayerZero reviewed and endorsed the bridge configuration later blamed for the attack; those claims have not been…

By 3 min read
KelpDAO Files Lawsuit Against LayerZero Over $292M rsETH Bridge Exploit

TL;DR

  • Evercrest Technologies, the organization behind KelpDAO, has initiated a civil lawsuit against LayerZero entities alongside co-founder Bryan Pellegrino.
  • The legal action centers on an April security breach that resulted in the theft of 116,500 rsETH, valued at approximately $292 million at the time.
  • KelpDAO contends that LayerZero evaluated and approved the specific bridge layout later held responsible for the breach, though these accusations remain unproven in a court of law.

The developer behind KelpDAO has escalated its conflict with LayerZero into the judicial system, launching a civil suit regarding the April cross-chain bridge hack that drained the restaking protocol of nearly $292 million.

Evercrest Technologies lodged the complaint with the Supreme Court of British Columbia, naming LayerZero Labs Ltd., LayerZero Labs Canada Inc., and co-founder Bryan Pellegrino as defendants.

The legal claims encompass allegations of negligence, negligent misrepresentation, and defamation.

The Dispute Centers On A 1-of-1 Security Configuration

The incident in question saw the theft of 116,500 rsETH transferred via a bridge linking the KelpDAO network to Unichain.

When the attack occurred, these digital assets held a market value of roughly $292 million.

The security setup of the bridge has served as a central flashpoint ever since.

According to KelpDAO’s legal filing, LayerZero examined and signed off on a framework utilizing just one Decentralized Verifier Network (DVN), instead of cautioning the protocol that such a setup introduced a high-risk single point of failure.

Furthermore, the lawsuit claims that LayerZero subsequently pointed the finger at KelpDAO for implementing that very architecture.

These assertions stem entirely from Evercrest’s court documents.

As of now, LayerZero has not been judged liable, and the court filing does not prove that either party’s version of events is definitive.

This distinction carries significant weight in a controversy where technical accountability for the bridge breakdown forms the core of the litigation.

Historically, vulnerabilities in cross-chain systems have been handled strictly as technical matters.

Typically, a bridge suffers a breach, analysts track the stolen capital, engineers issue patches, and protocols debate who configured the parameters.

The KelpDAO litigation threatens to shift these disputes into a courtroom setting.

Should infrastructure providers evaluate or endorse security frameworks utilized by external applications, judicial bodies may eventually be forced to determine what legal liability accompanies such guidance.

Such a precedent would carry consequences extending far beyond just KelpDAO and LayerZero.

Interoperable networks rely heavily on protocols merging software code and trust frameworks that they did not independently build from scratch.

When vast sums of capital flow through these networks, conflicting views regarding risk awareness can quickly transcend ordinary engineering disagreements.

At present, this lawsuit represents the start of that legal journey rather than its final outcome.

The security breach took place in April.

The battle to determine who carries the blame is only now entering the courtroom.

This article was written by the News Desk and edited by Samuel Rae.

Short FAQs

Who filed the lawsuit against LayerZero?

Evercrest Technologies, the company behind KelpDAO, filed the civil claim in the Supreme Court of British Columbia.

What is the financial scale of the rsETH bridge exploit?

The exploit involved 116,500 rsETH, which had an approximate value of $292 million at the time of the April attack.

The lawsuit includes allegations of negligence, negligent misrepresentation, and defamation.

Has LayerZero been found legally liable for the incident?

No. LayerZero has not been found liable, and the allegations in the court filing have not yet been proven in court.

Leave a comment

Market data by CoinGecko