KelpDAO sues LayerZero over $292M rsETH exploit
Evercrest Technologies, which develops KelpDAO, filed a civil claim in British Columbia against LayerZero, its Canadian arm, and CEO Bryan Pellegrino over the April rsETH bridge exploit. The filing ties the case to 116,500 rsETH drained in the attack, which was worth about $292 million at the time, and says the bridge setup was approved in writing before the incident. Pellegrino has said he will defend the claims in Vancouver, and he has also called the lawsuit meritless.
What this rests on
What it means
Each sentence links inside to the piece that supports it.
KelpDAO users and the wider DeFi sector are seeing a court fight rather than another round of public argument. The claim was filed in British Columbia, and it names LayerZero, its Canadian arm, and Bryan Pellegrino as defendants, so the dispute now sits in a court process that can surface new filings and testimony.
The practical change is that LayerZero’s bridge design and prior approvals are now part of a civil claim, not just a technical dispute around the April exploit. Before this filing, KelpDAO says LayerZero had endorsed the bridge setup in writing; now that same setup is being used as the basis for negligence and disclosure allegations in court.
What remains open is how the court will treat the written approvals, the single-verifier configuration, and the security and disclosure claims. The filings do not settle whether those approvals cover the disputed setup or whether the alleged flaws will be accepted as described, and that will depend on the record built in British Columbia.
Market reaction
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
How the story was built
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 2.4 years ago | DMM Bitcoin incident | $305M |
| 7 months ago | Drift Trade · Proxy Upgrade Hijack incident | $295M |
| 6 months ago | Kelp DAO incident | $293M |
| 2.7 years ago | PlayDapp incident | $290M |
| 7 months ago | Drift Protocol incident | $285M |
4197 incidents stored · 27 were as large as this one or larger ($292M)