KelpDAO has sued LayerZero and its CEO Bryan Pellegrino, alleging their security failures contributed to the $292 million exploit of KelpDAO's rsETH bridge. KelpDAO claims LayerZero endorsed its bridge setup before the attack, while LayerZero disputes responsibility, citing KelpDAO's reliance on a single verification path.
The lawsuit highlights ongoing disputes over responsibility and security standards in the DeFi space, potentially impacting user trust and the adoption of cross-chain technologies. It underscores the critical need for robust security protocols and transparent risk disclosure in decentralized finance.
KelpDAO has initiated legal action against cross-chain protocol LayerZero and its CEO, Bryan Pellegrino, following a significant exploit of KelpDAO's rsETH bridge in April that resulted in the theft of approximately $292 million worth of assets. KelpDAO alleges that deficiencies in LayerZero's security infrastructure and a failure to disclose risks contributed to the attack. The lawsuit claims that LayerZero had previously reviewed and endorsed KelpDAO's bridge setup in writing before the exploit occurred.
In response, Bryan Pellegrino dismissed the claims as "meritless" and stated his intention to defend against the lawsuit. The dispute centers on whether the exploit was due to vulnerabilities in LayerZero's infrastructure, KelpDAO's bridge configuration, or a combination of both. LayerZero's incident report indicated that attackers compromised its internal nodes, leading to the approval of a fraudulent cross-chain message. LayerZero also pointed out that KelpDAO's bridge utilized only a single LayerZero decentralized verifier network (DVN), a setup LayerZero had previously recommended against, advocating for the use of multiple DVNs. KelpDAO has contested this narrative, asserting that its DVN configuration was previously reviewed and deemed secure by LayerZero, and that LayerZero failed to adequately warn them of associated risks. Following the incident, KelpDAO announced plans to migrate its rsETH bridge to Chainlink's Cross-Chain Interoperability Protocol.
Pick the topics you care about. Get only what matters, on your cadence.