KelpDAO Sues LayerZero Over $292M Exploit

KelpDAO, a cross-chain lending protocol, has initiated legal action against LayerZero and its co-founder, Brian Pellegrino, on March 15, 2026, following a significant exploit that resulted in the loss of $292 million. The lawsuit, filed in the Delaware Court of Chancery, alleges that LayerZero and Pellegrino failed to disclose critical vulnerabilities within their interoperability protocol. KelpDAO contends that these undisclosed weaknesses were directly responsible for the massive financial loss experienced by the protocol. The exploit, which occurred on February 19, 2026, targeted the Inter-Blockchain Communication (IBC) protocol, a core component of LayerZero's infrastructure, allowing for seamless communication and asset transfers between different blockchain networks. KelpDAO, which utilizes LayerZero's technology to facilitate its cross-chain lending services, claims that the exploit exploited a flaw in the way LayerZero handled cross-chain messages, enabling malicious actors to drain funds. The protocol's total value locked (TVL) plummeted following the incident, severely impacting its users and operations. In its complaint, KelpDAO asserts that LayerZero and Pellegrino were aware of the security risks associated with their protocol but deliberately withheld this information from users and partners like KelpDAO. This alleged non-disclosure, according to the lawsuit, constitutes a breach of contract and fiduciary duty. KelpDAO is seeking damages to compensate for the stolen funds and to cover the costs associated with the incident, including security audits and recovery efforts. The lawsuit highlights the growing concerns surrounding the security of cross-chain interoperability solutions, which are essential for the functioning of the decentralized finance (DeFi) ecosystem. As the DeFi space continues to expand, the reliance on such protocols increases, making their security paramount. The exploit on LayerZero's infrastructure serves as a stark reminder of the potential risks involved in connecting disparate blockchain networks. LayerZero, a prominent player in the blockchain interoperability space, has been instrumental in enabling cross-chain transactions for numerous decentralized applications. Its protocol is designed to facilitate secure and efficient communication between blockchains, a critical function for the broader adoption of decentralized technologies. Brian Pellegrino, as a co-founder, has been a leading figure in the development and promotion of LayerZero's technology. The legal proceedings are expected to scrutinize the internal security practices of LayerZero and the extent of their knowledge regarding the vulnerabilities that led to the exploit. The outcome of this lawsuit could have significant implications for the future of cross-chain interoperability protocols and the regulatory landscape surrounding them. KelpDAO's legal action underscores the increasing demand for accountability and transparency within the blockchain industry, particularly concerning the security of financial protocols that handle substantial amounts of user assets. The $292 million loss represents one of the largest financial exploits in the decentralized finance sector in 2026, drawing significant attention from regulators, investors, and the wider blockchain community.