The decentralized finance (DeFi) world is no stranger to dramatic turns, but the latest legal battle has grabbed significant attention. Kelp DAO has filed a lawsuit against LayerZero Labs and its co-founder Bryan Pellegrino, accusing them of responsibility for the massive $292 million rsETH bridge exploit that shook the crypto community in April 2025.
What Happened in the rsETH Exploit?
For those unfamiliar with the term, a “bridge” in crypto is like a digital highway connecting two separate blockchains. It lets users move their assets from one network to another. Think of it as exchanging dollars for euros when traveling to another country, except everything happens on the blockchain, automatically and without a bank.
In April 2025, an exploit targeting the rsETH (restaked ETH) bridge resulted in losses of approximately $292 million. rsETH is a type of token that represents staked Ethereum, earning rewards for users who lock up their ETH to help secure the network. The breach allowed attackers to drain funds, sending shockwaves through the DeFi ecosystem.
Who Is Kelp DAO?
Kelp DAO is a liquid restaking protocol built on Ethereum. Without diving too deep into technical jargon, restaking allows users to put their staked ETH to work across multiple protocols, earning extra rewards on top of standard staking yields. Kelp DAO wrapped this concept into the rsETH token, making it easier for users to participate.
Who Is LayerZero?
LayerZero is an omnichain interoperability protocol, a fancy way of saying it helps different blockchains talk to each other. Its technology powers many cross-chain bridges, including the one used by Kelp DAO. Because LayerZero’s infrastructure was the foundation on which the rsETH bridge operated, Kelp DAO alleges that LayerZero and its co-founder bear responsibility for the loss.
The Lawsuit Allegations
Kelp DAO’s legal filing reportedly claims that LayerZero and Bryan Pellegrino were aware of vulnerabilities in the bridge infrastructure but failed to address them adequately. The lawsuit points to the scale of the loss, nearly $292 million in user funds, as evidence of negligence.
This is one of the largest legal disputes in DeFi history, and it raises an important question for the entire industry: who is responsible when cross-chain bridges fail? Is it the protocol running on the bridge, the technology provider powering it, or both?
Why Bridge Exploits Keep Happening
Bridge exploits have unfortunately become one of the most common attack vectors in crypto. Some of the largest hacks in history, including the Ronin Bridge hack ($625 million) and the Wormhole exploit ($320 million), targeted these cross-chain connectors.
The reason bridges are such attractive targets comes down to complexity. Imagine two different countries with completely different legal systems agreeing to recognize each other’s property rights. Now add smart contracts (self-executing programs on the blockchain) to that mix. The more moving parts involved, the more opportunities exist for bad actors to find loopholes.
Implications for DeFi Users
This lawsuit sends a clear message to the DeFi world: protocols and infrastructure providers may face legal consequences for security failures. For everyday crypto users, it highlights the importance of understanding where your assets are and who is responsible for safeguarding them.
If you actively participate in DeFi, whether by staking, restaking, or bridging tokens, consider these best practices:
- Research the protocol thoroughly before depositing funds. Look for independent security audits.
- Diversify your holdings. Don’t keep all your assets in one protocol or bridge.
- Use hardware wallets for long-term storage. A Ledger hardware wallet keeps your private keys offline, far away from internet-based attacks.
- Stay updated on security incidents in the protocols you use.
What Comes Next?
The outcome of this lawsuit could set a major precedent for how responsibility is assigned in cross-chain exploits. If the court rules in Kelp DAO’s favor, infrastructure providers like LayerZero may face increased legal exposure for vulnerabilities in the technology they build.
Conversely, LayerZero and Pellegrino are expected to defend against the allegations, potentially arguing that the exploit stemmed from issues outside their direct control. The case will likely unfold over months, if not years, providing plenty of time for the crypto industry to watch and learn.
Final Thoughts
The Kelp DAO vs. LayerZero lawsuit represents more than just a legal dispute. It is a defining moment for DeFi maturity, where the lines between technical innovation and legal accountability are being tested in real time. As the industry grows, both protocols and infrastructure providers must prioritize security, transparency, and user protection.
For those looking to stay safe in DeFi, the lessons are clear. Use trusted tools, whether that’s a secure crypto exchange like Kraken for trading, a reliable platform like Bitvavo for European users, or a hardware wallet for self-custody. Stay informed, stay cautious, and never invest more than you can afford to lose.
