Skip to content
KelpDAO Sues LayerZero Over $292M Exploit in Cross-Chain Protocol

KelpDAO Sues LayerZero Over $292M Exploit in Cross-Chain Protocol

First seen 25 Sep 2026, 10:53 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 25, 2026 at 11:53 UTC
  • •KelpDAO accuses LayerZero of failing to disclose vulnerabilities leading to a $292M exploit.
  • •The exploit involved social engineering to compromise a developer account and exploit a verifier vulnerability.
  • •The incident triggered a liquidity crisis in DeFi, erasing $20 billion in deposits.

KelpDAO has initiated a lawsuit against LayerZero and its CEO Bryan Pellegrino, claiming that undisclosed vulnerabilities in LayerZero's cross-chain protocol led to a $292 million exploit. The attack, which occurred on April 22, involved social engineering tactics to compromise a developer account, allowing attackers to exploit a single verifier vulnerability and drain 116,500 rsETH. This incident not only resulted in significant financial losses for KelpDAO but also triggered a liquidity crisis that erased $20 billion in decentralized finance deposits. Pellegrino has labeled the lawsuit as meritless and plans to defend himself in a British Columbia court. The legal dispute raises questions about the security of cross-chain infrastructure and its implications for future regulatory scrutiny in the crypto sector.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-22
Exploit occurs
A social engineering attack drains 116,500 rsETH from KelpDAO, resulting in $292 million in losses.
Moomoo
2026-09-25
KelpDAO files lawsuit
KelpDAO sues LayerZero and CEO Bryan Pellegrino for damages related to the exploit.
Coindesk
2026-09-25
Pellegrino responds
LayerZero's CEO Bryan Pellegrino calls the lawsuit meritless and states he will defend himself in court.
Coindesk

More articles in this cluster (3)

Following this threat?

Track Bryan Pellegrino in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed