KelpDAO sues LayerZero, CEO over $292M rsETH bridge exploit

KelpDAO has filed a lawsuit against cross-chain protocol LayerZero following the roughly $292 million exploit of its rsETH bridge earlier this year, alleging that failures in LayerZero’s security infrastructure contributed to the attack.

KelpDAO said Friday that LayerZero failed to disclose risks in its technology or prevent attackers from compromising its infrastructure. It also alleged that LayerZero had reviewed and endorsed its deployment and configuration in writing before the exploit.

The lawsuit also names LayerZero co-founder and CEO Bryan Pellegrino.

“Our number one priority has always been and will remain the security of our users’ assets,” Kelp wrote. “But we also need to correct the record, and hold LayerZero and Mr. Pellegrino accountable for the harm they have caused us and the broader DeFi ecosystem.”

Pellegrino called the claim “meritless” and said he would defend the case in Vancouver. 

The lawsuit escalates a months-long dispute over whether the loss was caused by the compromise of LayerZero’s infrastructure, KelpDAO’s bridge configuration, or both.

Cointelegraph contacted LayerZero for further comment, but did not receive a response before publication.

Kelp and LayerZero have disputed responsibility since April