Kelp DAO has filed a lawsuit against cross-chain messaging protocol LayerZero and its chief executive Bryan Pellegrino, alleging the defendants bear responsibility for a $292 million exploit involving rsETH, the liquid restaking token issued by Kelp DAO on Ethereum.
Kelp DAO has filed a lawsuit against cross-chain messaging protocol LayerZero and its chief executive Bryan Pellegrino, alleging the defendants bear responsibility for a $292 million exploit involving rsETH, the liquid restaking token issued by Kelp DAO on Ethereum.
What the Kelp DAO Lawsuit Alleges
What to Know:
- Kelp DAO names LayerZero and CEO Bryan Pellegrino as defendants in connection with an alleged $292 million rsETH exploit.
- The case is active litigation; no judgment or settlement has been reached, and all claims are allegations at this stage.
The lawsuit positions LayerZero, a blockchain interoperability protocol that enables token and message passing across separate networks, as a responsible party in the rsETH incident. rsETH is a receipt token representing restaked Ethereum that users deposit through Kelp DAO’s protocol. Kelp DAO’s legal action directly names Pellegrino in his capacity as the company’s chief executive, a step that indicates the complaint goes beyond institutional liability to allege personal culpability. For related coverage, see Bitcoin Proposal Could Rescue Locked Multisig Wallets.
The $292 million figure cited in the complaint represents the reported scale of the alleged exploit, though the precise mechanism, the date of the incident, and the on-chain transactions underlying that valuation remain unconfirmed in the public record at this stage. The allegations have not been tested or proven in court. For related coverage, see 600 BTC Wallet Moves as Dormant Activity Hits 1,971 BTC.
LayerZero’s involvement in prior DeFi security incidents is not without precedent in the ecosystem. After a separate security episode linked to Kelp’s infrastructure, Lombard Protocol migrated its cross-chain messaging away from LayerZero entirely, replacing LayerZero with Chainlink’s CCIP for its Bitcoin-backed assets. That migration illustrated how a single bridge-layer vulnerability can prompt protocol-level decisions affecting hundreds of millions of dollars in user funds.
Why the rsETH Exploit Matters for DeFi
rsETH is a liquid restaking token, meaning holders receive yield from Ethereum’s validator layer while retaining the ability to deploy the token across DeFi protocols. An exploit at the bridge or messaging layer that affects how rsETH is minted, burned, or transferred across chains can distort the token’s peg to underlying ETH and expose a wide range of connected protocols to cascading losses.
The choice to sue the interoperability layer rather than a smart contract auditor or an individual attacker signals that Kelp DAO’s complaint is focused on infrastructure-level accountability, a legal theory that, if successful, would have significant implications for how cross-chain bridge operators assess and manage their liability exposure.
Cross-chain exploits have been among the costliest incidents in decentralised finance, and holding infrastructure providers legally accountable remains largely untested territory. The outcome of this case could influence how bridge protocols structure their terms of service, security audits, and insurance arrangements going forward. A parallel can be drawn to the THORChain exploit that triggered an emergency chain halt, where protocol governance, not litigation, was the primary response mechanism.
What Happens Next in the Case
LayerZero and Pellegrino have not yet issued a public response to the lawsuit based on information currently available. The defendants will have the opportunity to file a formal response, and the case will proceed through standard civil litigation stages including discovery, motions practice, and potentially trial.
Key disclosures to watch include court filings that specify the legal theory of liability, the exact exploit mechanism alleged, and any documentation of how the $292 million damages figure was calculated. Whether Kelp DAO seeks monetary damages, injunctive relief, or both will shape the scope of the proceedings.
The case remains unresolved, and readers following rsETH exposure or LayerZero integrations should monitor official court filings for verified developments rather than relying on preliminary reports. From a Bitcoin-first vantage point, the litigation underscores why Bitcoin’s single-layer, no-smart-contract architecture carries a fundamentally different risk profile than multi-layer DeFi stacks built on Ethereum restaking infrastructure.
Additional source references: source document 1, source document 2.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
