Why did KelpDAO sue LayerZero over the $292M rsETH bridge exploit?

KelpDAO has filed a lawsuit against LayerZero and its CEO Bryan Pellegrino, alleging that the protocol's endorsement of a vulnerable bridge setup led to a $292 million exploit. The legal action seeks to hold the cross-chain infrastructure provider accountable for technical failures that resulted in massive losses for rsETH holders.
Why did KelpDAO sue LayerZero over the $292M rsETH bridge exploit?

KelpDAO initiated legal action against LayerZero and its CEO Bryan Pellegrino in early 2026, following a catastrophic security breach that drained $292 million from the rsETH bridge. The core of the lawsuit hinges on the allegation that LayerZero engineers explicitly reviewed and endorsed KelpDAO’s specific bridge configuration prior to the attack. KelpDAO contends that this professional endorsement shifts the liability for the exploit onto LayerZero, while Pellegrino has dismissed the filing as a meritless attempt to deflect blame for the protocol's own security lapses.

The exploit, which targeted the liquid restaking token (LRT) ecosystem, has sent shockwaves through the DeFi community in 2026. According to the complaint, the attackers managed to manipulate the cross-chain messaging layer to mint unauthorized rsETH, a vulnerability that KelpDAO claims should have been caught during LayerZero’s integration support. This case is being closely watched by legal experts as it represents one of the first major attempts to apply traditional negligence and liability standards to decentralized infrastructure providers.

From a regulatory perspective, this lawsuit could prompt US authorities to demand more robust Service Level Agreements (SLAs) and consumer protection standards for DeFi bridges. If the court favors KelpDAO, it could establish a precedent where infrastructure protocols are legally responsible for the security of the projects that build on top of them. This would likely lead to a mandatory shift toward comprehensive insurance funds and stricter, audited onboarding processes for all cross-chain deployments.

For market participants, the outcome will dictate the risk profile of liquid restaking tokens and the perceived safety of the LayerZero ecosystem. Investors should watch for the discovery phase of the trial, which is expected to reveal internal communications between the two teams regarding the bridge's initial setup. As the legal battle progresses through 2026, the volatility of rsETH and related DeFi assets will likely remain high as liquidity providers weigh the risks of bridge-related contagion.

Editorial method

This report is based on the linked source and is labeled with its publication date, provider, category and market-impact assessment. Market interpretation is informational, not investment advice.