KelpDAO, the decentralized autonomous organization that operates the rsETH lending protocol, filed a civil suit in a Canadian court on Thursday accusing LayerZero and its co‑founder Brian (also reported as Bryan) Pellegrino of negligence and failure to disclose critical vulnerabilities that led to the largest crypto exploit of 2026, valued at $292 million.
Background of the rsETH Bridge Exploit
The attack, which occurred on April 18, targeted the rsETH bridge that enables the token, marketed as a fully collateralised version of Ethereum, to move between blockchains. According to multiple outlets including CoinDesk and The Block, KelpDAO alleges that LayerZero had formally endorsed the bridge configuration used at the time of the breach. The exploit drained nearly $292 million in assets, prompting a sharp drop in rsETH’s market price and reigniting concerns about the security of cross‑chain infrastructure.
Cross‑chain bridges have become a linchpin of the decentralized finance (DeFi) ecosystem, allowing assets to flow between isolated blockchain networks. While they unlock new liquidity opportunities, they also present a large attack surface. Industry analysts note that the rsETH incident follows a string of high‑profile bridge failures in recent years, underscoring the sector’s vulnerability to sophisticated exploits.
Legal Claims and Responses
KelpDAO’s filing, reported by Cointelegraph and The Crypto Times, states that LayerZero provided written endorsement of the bridge setup despite being aware of “significant security weaknesses.” The DAO contends that LayerZero’s omission of these flaws breached its duty of care and directly contributed to the loss. The lawsuit seeks damages equivalent to the full amount of the exploit, as well as injunctive relief to prevent similar incidents.
LayerZero and Pellegrino have publicly rejected the allegations. In a brief statement, Pellegrino described the suit as “without merit” and defended the company’s role as a messaging layer rather than a bridge operator. Cointelegraph highlighted that the CEO’s response emphasizes LayerZero’s limited responsibility for downstream bridge configurations.
Legal experts note that the case could set a precedent for how responsibility is allocated among infrastructure providers in the DeFi space. If the court finds LayerZero liable, it may compel other protocol developers to adopt stricter disclosure practices and could trigger a wave of litigation targeting similar services.
The broader market reacted swiftly. Within hours of the news, rsETH’s price fell another 12 percent, while LayerZero’s native token, ZRO, slipped 8 percent on major exchanges. Analysts at Bloomberg Crypto warned that the lawsuit could exacerbate an already cautious investor sentiment toward cross‑chain projects, which have faced a series of exploits this year.
"The exploit resulted in a loss of $292 million, making it the largest security breach in the cryptocurrency sector this year," said CoinDesk.
Other parties implicated in the fallout include Tether, the issuer of the underlying US‑dollar‑backed asset that underpins rsETH. A separate report from Crypto News indicated that Tether’s exposure to the hack is less than 0.034 % of its total reserves, a figure the company says does not threaten its overall solvency.
As the case moves forward, regulators are watching closely. The U.S. Securities and Exchange Commission has recently signaled increased scrutiny of DeFi platforms, and the Canadian Securities Administrators have expressed interest in the legal implications of cross‑chain infrastructure failures. The outcome of KelpDAO’s lawsuit may therefore influence both industry practices and future regulatory approaches.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $84,564 | +1.37% | $1698.9B |
 Ethereum ETH | $2,694 | +1.35% | $328.9B |
 BNB BNB | $775.45 | +1.10% | $103.3B |
 XRP XRP | $1.55 | +5.59% | $97.4B |
 Solana SOL | $117.43 | +3.56% | $69.0B |
 Dogecoin DOGE | $0.0963 | +4.05% | $15.0B |
 Cardano ADA | $0.252 | +6.94% | $9.5B |
Live data: CoinGecko — 2026-09-25 09:22 UTC
