The $292M $RSETH bridge exploit has officially moved from X threads to the courtroom.
KelpDAO has sued LayerZero and CEO Bryan Pellegrino in British Columbia, alleging that LayerZero failed to disclose security risks and had approved the 1-of-1 verifier setup that ultimately left the bridge exposed.
LayerZero has a very different version of events.
Its own incident report says the attacker compromised infrastructure feeding its DVN, but argues the loss was only possible because Kelp's bridge relied on a single verifier instead of multiple independent verifiers.
Now both sides will have to argue their version with evidence.
116,500 rsETH were drained in the attack, worth roughly $292M at the time.
Kelp has since moved toward a different bridging setup, but the bigger question is still unresolved:
When shared infrastructure fails, where does the responsibility actually sit?
KelpDAO has sued LayerZero and CEO Bryan Pellegrino in British Columbia, alleging that LayerZero failed to disclose security risks and had approved the 1-of-1 verifier setup that ultimately left the bridge exposed.
LayerZero has a very different version of events.
Its own incident report says the attacker compromised infrastructure feeding its DVN, but argues the loss was only possible because Kelp's bridge relied on a single verifier instead of multiple independent verifiers.
Now both sides will have to argue their version with evidence.
116,500 rsETH were drained in the attack, worth roughly $292M at the time.
Kelp has since moved toward a different bridging setup, but the bigger question is still unresolved:
When shared infrastructure fails, where does the responsibility actually sit?
