KelpDAO, through its parent company Evercrest Technologies, has filed a civil claim in the Supreme Court of British Columbia against LayerZero Labs Ltd., LayerZero Labs Canada Inc., and co-founder Bryan Pellegrino. The lawsuit seeks damages following an April 2026 exploit that drained 116,500 rsETH, valued at approximately $292 million at the time of the incident. KelpDAO alleges that LayerZero was negligent in reviewing and endorsing a “1-of-1” Decentralized Verifier Network (DVN) configuration that created a single point of failure, and subsequently defamed the protocol by publicly shifting blame for the technical oversight.
The dispute focuses on a bridge connecting KelpDAO infrastructure with Unichain. According to the court filing, KelpDAO claims LayerZero provided assurances that the security setup was sufficient, despite it relying on a single verifier. When the exploit occurred, KelpDAO alleges that LayerZero leadership misrepresented the situation by claiming KelpDAO was solely responsible for the configuration. This case is significant because it moves the discourse surrounding bridge security away from technical post-mortems and toward the legal concepts of professional negligence and misrepresentation.
For the broader DeFi ecosystem, this lawsuit signals a shift in how infrastructure providers and decentralized applications interact. If the court finds LayerZero liable for endorsing a flawed configuration, it could set a precedent requiring cross-chain protocols to adopt stricter, legally-binding security disclosures or even carry professional liability insurance. While this may increase the cost of operation for interoperability providers, it could ultimately lead to higher safety standards for retail users moving assets across the burgeoning Unichain and Ethereum ecosystems.
Market participants should watch for LayerZero’s formal response and any discovery evidence involving internal communications about DVN security standards. A ruling in favor of KelpDAO could trigger a wave of litigation against other infrastructure providers who have historically avoided legal responsibility for protocol exploits. Conversely, a victory for LayerZero would reinforce the "use at your own risk" ethos of DeFi, placing the ultimate burden of security verification on the developers who implement third-party tools.