KelpDAO Sues LayerZero Over Alleged Role in rsETH Bridge Exploit

KelpDAO's parent company Evercrest Technologies has filed a lawsuit against LayerZero entities and co-founder Bryan Pellegrino over a $292 million rsETH bridge exploit in April. The complaint alleges that LayerZero reviewed and endorsed a security configuration for the bridge, which was later blamed for the attack.

The underlying issue involved 116,500 rsETH moved through a bridge connecting KelpDAO infrastructure with Unichain. At the time of the attack, these assets were worth approximately $292 million. The lawsuit claims that LayerZero's involvement in reviewing and endorsing the security configuration created a single point of failure, which ultimately led to the exploit.

The case marks a significant development in the intersection of blockchain and law, as it raises questions about the responsibility of infrastructure providers when advising on security configurations for third-party applications. This has implications beyond KelpDAO and LayerZero, potentially affecting interoperability systems that rely on protocols integrating software and trust assumptions they did not design entirely themselves.