KelpDAO sues LayerZero, CEO over $292M rsETH bridge exploit
KelpDAO has sued LayerZero and its CEO Bryan Pellegrino over the roughly $292 million April exploit of its rsETH bridge, claiming LayerZero’s security failures helped enable the attack. Kelp says LayerZero did not adequately disclose risks, failed to protect its infrastructure, and had previously reviewed and approved Kelp’s deployment and configuration in writing. LayerZero says the claim is meritless and will defend itself. The dispute centers on who was responsible: LayerZero says attackers compromised its internal nodes and used a forged cross-chain message, and that Kelp’s bridge was vulnerable because it relied on a single DVN verifier. Kelp rejects that account and says LayerZero had previously assured it the setup was secure. After the attack, Kelp said it would migrate to Chainlink’s CCIP.
