KelpDAO Sues LayerZero and CEO Bryan Pellegrino Over $292M Hack
KelpDAO has filed a lawsuit in opposition to LayerZero and its co-founder Bryan Pellegrino, accusing the bridge supplier of safety failures behind the $292 million exploit of its rsETH token in April.
The swimsuit, filed in British Columbia, is KelpDAO’s most direct try but to carry LayerZero accountable after months of public disagreement over what brought on the breach.
KelpDAO Accuses LayerZero of Security Failures
In an announcement posted on X on September 25, KelpDAO alleged that the exploit resulted from LayerZero’s failure to reveal weaknesses in its expertise and stop an infiltration of its safety infrastructure.
“Rather than take duty, over the previous couple of months, LayerZero and Mr. Pellegrino publicly blamed us for his or her failures,” KelpDAO said. “But the report is easy: LayerZero reviewed and endorsed—in writing—our deployment and configuration of LayerZero’s expertise.”
That straight challenges LayerZero’s argument that the assault was remoted to KelpDAO’s rsETH configuration as a result of the bridge used a 1-of-1 Decentralized Verifier Network, or DVN.
Under that setup, LayerZero’s personal DVN was the only real verifier, that means a solid cross-chain message could possibly be accepted with out a second unbiased verifier rejecting it.
LayerZero maintained that it had beneficial utilizing a number of DVNs to keep away from such a single level of failure. But KelpDAO pushed again on that account in a May 6 report. The protocol argued that the 1-of-1 configuration was not an uncommon setup chosen in opposition to LayerZero’s steerage. Instead, it claimed the configuration adopted LayerZero’s official documentation and default deployment practices.
Up till supposed white-hat hackers drained $320 million from Liquid Network (most of which was returned) and in the present day’s $351 million Bitget scorching pockets breach, the KelpDAO incident had been the biggest crypto safety exploit of 2026.
Cyvers on the time estimated that about $293.7 million in rsETH was drained, with the attacker transferring the property into ETH throughout Ethereum and Arbitrum, whereas lending protocols together with Aave V3, Compound V3, and Euler had been additionally affected.
Pellegrino Ready to Defend Himself
In its personal phrases, KelpDAO needs to set the report straight and “maintain LayerZero and Mr. Pellegrino accountable for the hurt they’ve brought on.”
And the LayerZero CEO responded inside hours on X, confirming that Evercrest, KelpDAO’s mum or dad entity, had filed a discover of civil declare in opposition to him and his firm in British Columbia.
“The declare continues to be meritless, will meet them in Vancouver and defend myself accordingly,” he wrote.
Also on X, Solana Foundation’s Seraphim Czecker summed up the temper round founding DeFi as one thing nearer to a Game of Thrones plotline, the place you’re both on the high making tons of of tens of millions of {dollars} or your online business is suffocating and dying.
“If you get hacked, you get sued into oblivion and lose years to court docket battles,” he added.
The publish KelpDAO Sues LayerZero and CEO Bryan Pellegrino Over $292M Hack appeared first on CryptoPotato.
