KelpDAO Sues LayerZero Over $292M Bridge Exploit
- On April 18, LayerZero’s bridge released approximately $292 million worth of rsETH on Ethereum due to a forged message.
- The exploit resulted in an estimated bad debt for Aave ranging from $123.7 million to $230.1 million.
- KelpDAO filed a lawsuit against LayerZero and its CEO, Bryan Pellegrino, on September 24, claiming negligence in security measures.
- LayerZero later moved away from supporting single-verifier configurations for high-value transactions following the incident.
The legal battle between KelpDAO and LayerZero centers around responsibility for the security lapse that led to the massive release of rsETH tokens without corresponding burns on another blockchain. The case highlights vulnerabilities in decentralized finance infrastructure where smart contracts rely heavily on external data verifications.
The lawsuit aims to determine accountability for the exploit that caused significant financial damage and operational disruptions within the DeFi ecosystem, impacting entities like Aave and others linked to DeFi protocols. (Source)