{"id":13247,"date":"2026-09-27T05:00:44","date_gmt":"2026-09-27T05:00:44","guid":{"rendered":"https:\/\/ad-doge.com\/blog\/kelpdao-sues-layerzero-over-292m-rseth-bridge-exploit\/"},"modified":"2026-09-27T05:00:44","modified_gmt":"2026-09-27T05:00:44","slug":"kelpdao-sues-layerzero-over-292m-rseth-bridge-exploit","status":"publish","type":"post","link":"https:\/\/ad-doge.com\/blog\/kelpdao-sues-layerzero-over-292m-rseth-bridge-exploit\/","title":{"rendered":"KelpDAO Sues LayerZero Over $292M rsETH Bridge Exploit"},"content":{"rendered":"<h2>TL;DR<\/h2>\n<ul>\n<li>Evercrest Technologies, the company behind KelpDAO, has filed a civil claim against LayerZero entities and co-founder Bryan Pellegrino.<\/li>\n<li>The lawsuit concerns the April exploit that drained 116,500 rsETH, worth about $292 million at the time.<\/li>\n<li>KelpDAO alleges LayerZero reviewed and endorsed the bridge configuration later blamed for the attack; those claims have not been proven in court.<\/li>\n<\/ul>\n<p>The company behind KelpDAO has taken its dispute with LayerZero into court, filing a civil claim over the April bridge exploit that cost the restaking protocol roughly $292 million.<\/p>\n<p>Evercrest Technologies filed the case in the Supreme Court of British Columbia against LayerZero Labs Ltd., LayerZero Labs Canada Inc. and co-founder Bryan Pellegrino.<\/p>\n<p>The allegations include negligence, negligent misrepresentation and defamation.<\/p>\n<h2>The Dispute Centers On A 1-of-1 Security Configuration<\/h2>\n<p>The underlying exploit involved 116,500 rsETH moved through a bridge connecting KelpDAO infrastructure with Unichain.<\/p>\n<p>At the time of the attack, the assets were worth approximately $292 million.<\/p>\n<p>A major point of disagreement since then has been the bridge\u2019s security configuration.<\/p>\n<p>KelpDAO alleges LayerZero reviewed and endorsed a setup using a single Decentralized Verifier Network, or DVN, rather than warning the project that the configuration created a dangerous single point of failure.<\/p>\n<p>The lawsuit further alleges that LayerZero later blamed KelpDAO for using that design.<\/p>\n<p>Those are allegations from Evercrest\u2019s court filing.<\/p>\n<p>LayerZero has not been found liable, and the filing does not establish that its account of the events is correct.<\/p>\n<p>That distinction is especially important in a dispute where the technical responsibility for a bridge failure is itself part of the case.<\/p>\n<h2>Bridge Security Is Becoming A Legal Question Too<\/h2>\n<p>Cross-chain security failures have typically been treated as technical incidents.<\/p>\n<p>A bridge gets exploited, investigators trace the funds, developers patch the vulnerability and protocols argue over who configured what.<\/p>\n<p>The KelpDAO case could push that discussion into a different arena.<\/p>\n<p>If infrastructure providers review or recommend security configurations used by third-party applications, courts may eventually have to decide what responsibility comes with that advice.<\/p>\n<p>That has implications well beyond KelpDAO and LayerZero.<\/p>\n<p>Interoperability systems depend on protocols integrating software and trust assumptions they did not design entirely themselves.<\/p>\n<p>When hundreds of millions of dollars move through those systems, disagreements about who understood the risk can quickly become more than engineering disputes.<\/p>\n<p>For now, the lawsuit marks the beginning of that process rather than the conclusion.<\/p>\n<p>The exploit happened in April.<\/p>\n<p>The fight over who bears responsibility for it is only now moving into court.<\/p>\n<p><em>This article was written by the News Desk and edited by Samuel Rae.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>TL;DR Evercrest Technologies, the company behind KelpDAO, has filed a civil claim against LayerZero entities and co-founder Bryan Pellegrino. The lawsuit concerns the April exploit that drained 116,500 rsETH, worth about $292 million at the time. KelpDAO alleges LayerZero reviewed and endorsed the bridge configuration later blamed for the attack; those claims have not been&hellip;<\/p>\n","protected":false},"author":1,"featured_media":13248,"comment_status":"","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5697],"tags":[5744,5745,681,5068,125],"class_list":["post-13247","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-bridge","tag-kelpdao","tag-layerzero","tag-rseth","tag-technology"],"_links":{"self":[{"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/posts\/13247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/comments?post=13247"}],"version-history":[{"count":0,"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/posts\/13247\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/media\/13248"}],"wp:attachment":[{"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/media?parent=13247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/categories?post=13247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ad-doge.com\/blog\/wp-json\/wp\/v2\/tags?post=13247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}