KelpDAO Sues LayerZero Over $292M Exploit, Alleging Undisclosed Vulnerabilities

Why This Matters

• The lawsuit could set a precedent for whether cross-chain infrastructure providers can be held liable for vulnerabilities that enable large-scale exploits.
• It underscores the legal risks facing DeFi protocols after major hacks and the growing use of litigation to recover stolen funds.

Background

KelpDAO is a cross-chain lending protocol, and LayerZero is an interoperability platform that connects blockchains. The suit centers on whether LayerZero owed a duty to disclose known weaknesses in its software before the exploit occurred. The case is among the largest of 2026 in the crypto sector.

Key Perspectives

KelpDAO: Alleges LayerZero and Brian Pellegrino failed to disclose protocol weaknesses, directly enabling the $292 million exploit. LayerZero and Brian Pellegrino: No response or counter-perspective is included in the available report; their defense is not yet known. Critics/Skeptics: Questions may be raised about whether responsibility rests primarily with the lending protocol that integrated the interoperability layer, though no such arguments are detailed in the source.

What to Watch

• Whether LayerZero files a motion to dismiss or countersues, and what arguments it mounts regarding disclosure obligations.
• Whether other protocols affected by similar exploits pursue legal action against infrastructure providers.
• Any settlement or court ruling that could clarify liability in cross-chain DeFi incidents.