KelpDAO sues LayerZero, CEO over $292M rsETH bridge exploit
KelpDAO says LayerZero endorsed its bridge setup before the attack, while CEO Bryan Pellegrino has dismissed the lawsuit as meritless.
Asanat Analysis — Why it matters
KelpDAO's lawsuit against LayerZero signals a critical inflection point in cross-chain protocol liability. By claiming LayerZero endorsed a bridge configuration that subsequently failed, KelpDAO is testing whether infrastructure providers can be held accountable for security recommendations—a question the industry has largely avoided through terms-of-service disclaimers. This mirrors earlier tensions in DeFi after exploits (Nomad, Poly Network), where affected protocols sought recourse from underlying layer providers rather than absorbing losses themselves.
The $292M figure makes this the largest claimed bridge loss to date, elevating stakes beyond typical smart contract insurance coverage ($50-100M typical caps). LayerZero's dismissal of liability suggests the legal theory is novel and likely faces high evidentiary bars—proving 'endorsement' of a specific configuration creates a causation problem LayerZero will likely argue wasn't a guarantee. The outcome may redefine whether integration partners carry implicit responsibility for downstream applications, or whether the code-as-contract model insulates infrastructure layers entirely.
For the cross-chain sector, this lawsuit introduces regulatory-style enforcement pressure absent since bridge safety became a market baseline after 2022's hack cycle. If KelpDAO prevails on any theory, it could trigger a wave of similar claims against Wormhole, IBC, and other providers—potentially accelerating formal audit/certification standards and insurance products, or pushing projects toward self-custodial models.