DAO

$292 Million rsETH Exploit Prompts Kelp DAO Lawsuit Against LayerZero, Co-Founder

$292 Million rsETH Exploit Prompts Kelp DAO Lawsuit Against LayerZero, Co-Founder

The liquid restaking protocol accuses the cross-chain messaging firm of failures tied to a major loss of user funds

Kelp DAO, the liquid restaking protocol behind the rsETH token, has filed a lawsuit against LayerZero and a co-founder of the cross-chain messaging network. The legal action centers on an exploit reported to have drained roughly $292 million in value tied to rsETH. Kelp DAO argues LayerZero bears responsibility for failures connected to the incident.

LayerZero operates as interoperability infrastructure, allowing tokens and messages to move across different blockchains. Protocols like Kelp DAO rely on such bridges to keep restaked assets synchronized across networks. When cross-chain messaging systems fail or get exploited, the consequences can cascade into the protocols built on top of them.

One report on the matter referenced an entity called Evercrest in connection with the lawsuit against LayerZero, while other coverage identified Kelp DAO directly as the plaintiff pursuing claims tied to the rsETH losses. The exact corporate or legal relationship between Kelp DAO and Evercrest, if any, has not been detailed in available reporting. Readers should treat the naming discrepancy as an open question pending further clarification from the parties involved.

The $292 million figure represents one of the larger losses attributed to a single exploit event in the restaking sector this year. Restaking protocols pool staked ether and related assets, then extend that value across additional networks and applications to generate further yield. That layered structure has expanded the attack surface available to exploiters, since a vulnerability in a single dependency, such as cross-chain messaging, can expose funds across an entire ecosystem of connected products.

Legal action against infrastructure providers marks an escalation in how DeFi protocols respond to exploits. Historically, many hacks were addressed through negotiated bounty payments, community treasury reimbursements, or silent write-offs. A formal lawsuit signals that affected parties increasingly view courts, rather than on-chain governance alone, as a venue for recovering losses and assigning liability.

LayerZero has not issued a public response detailed in current reporting. The company has positioned itself as core infrastructure for cross-chain applications, and any liability finding could carry implications well beyond its relationship with Kelp DAO, given how widely its messaging protocol is integrated across decentralized finance.

The case also raises broader questions about how responsibility gets allocated when multiple layers of software, from token contracts to bridging protocols, contribute to a single point of failure. Courts have limited precedent for resolving disputes rooted in smart contract architecture and multichain design.

Sources disagree on this story

This article was published before the reports below were compared. The reporting above stands; what follows is where the published accounts do not agree.

Reports on KelpDAO’s lawsuit against LayerZero agree on the lawsuit and dollar figures but diverge on the exploit’s date, with CoinDesk citing April 22 against other outlets’ April 18.

What all sources agree on

  • KelpDAO, through its legal entity Evercrest Technologies Inc., sued LayerZero and co-founder/CEO Bryan Pellegrino in British Columbia.
  • The exploit drained 116,500 rsETH, worth approximately $292 million.
  • KelpDAO alleges LayerZero failed to disclose weaknesses/risks in its technology and did not prevent attackers from compromising security infrastructure tied to its verifier.
  • KelpDAO alleges LayerZero had reviewed and approved/endorsed the rsETH bridge’s deployment and configuration in writing before the exploit.
  • Pellegrino called the lawsuit ‘meritless’ and said he would defend himself and LayerZero in Vancouver/British Columbia.

Where the reports disagree

1Date of the rsETH bridge exploit

KelpDAO has sued LayerZero and co-founder Bryan Pellegrino in British Columbia over the April 18 exploit that drained 116,500 rsETH worth approximately $292 million.

crypto.news

KelpDAO‘s case centers on an April 18 attack that emptied 116,500 rsETH, worth about $292 million at the time, from the protocol’s bridge built on LayerZero’s cross-chain messaging network.

The Cryptonomist EN

The April 18 attack resulted in the theft of 116,500 rsETH, worth about $292 million at the time, from Kelp’s LayerZero-powered bridge.

Cointelegraph

The April 22 attack drained 116,500 rsETH and contributed to a broader liquidity crisis that erased $20 billion in decentralized finance deposits.

CoinDesk

What would settle it: The on-chain transaction records for the rsETH bridge drain, or LayerZero’s published incident report timeline.

What to make of it

Treat the lawsuit’s filing, the $292 million/116,500 rsETH figures, and Pellegrino’s ‘meritless’ response as established across sources; the exact date of the exploit is unresolved, with CoinDesk’s April 22 conflicting with the April 18 date given by crypto.news, The Cryptonomist EN, and Cointelegraph.

Market Impact

A lawsuit of this size could pressure LayerZero’s reputation among protocols that depend on its messaging infrastructure for cross-chain operations. Developers evaluating interoperability providers may factor in litigation risk alongside technical security audits going forward.

For rsETH holders and the broader liquid restaking market, the case underscores the financial exposure tied to infrastructure dependencies. Any court findings on liability could influence how future protocols structure indemnification, insurance, or risk-sharing agreements with third-party infrastructure vendors.

The lawsuit places renewed scrutiny on the security responsibilities of cross-chain infrastructure providers within the restaking ecosystem. Further details on both the plaintiff’s identity and LayerZero’s response are expected as the case proceeds.

Frequently Asked Questions

What is Kelp DAO’s rsETH token?

rsETH is a liquid restaking token issued by Kelp DAO, representing staked and restaked ether that can be used across other DeFi applications.

What role does LayerZero play in this dispute?

LayerZero provides cross-chain messaging infrastructure that protocols like Kelp DAO use to move assets and data between blockchains, and it is named as a defendant in the lawsuit.

Why is there confusion over who filed the lawsuit?

Different reports have named either Kelp DAO or an entity called Evercrest as the plaintiff, and the precise relationship between the two has not been clarified in available reporting.

How much was reportedly lost in the exploit?

Reports cite a loss of approximately $292 million tied to the rsETH exploit at the center of the lawsuit.

Original source: AltcoinGordon

Syndicated coverage. Originally reported by altcoingordon.com.