The legal battle lines between major players in the decentralized finance ecosystem have officially been drawn in a traditional courtroom. Evercrest Technologies, the company operating behind the prominent restaking protocol KelpDAO, has escalated its ongoing dispute with interoperability protocol LayerZero by filing a formal civil lawsuit. The legal action stems from a catastrophic bridge exploit that occurred in April, which resulted in the staggering loss of approximately $292 million from the restaking protocol.
According to official court documents, Evercrest Technologies filed the civil claim in the Supreme Court of British Columbia. The defendants named in the lawsuit include LayerZero Labs Ltd., LayerZero Labs Canada Inc., and co-founder Bryan Pellegrino. The comprehensive legal filing brings forward serious allegations against the infrastructure provider, including claims of negligence, negligent misrepresentation, and defamation, signaling a major shift in how cross-chain security disputes and infrastructure liabilities may be handled within the broader blockchain industry moving forward.
The Dispute Centers On A 1-of-1 Security Configuration
At the heart of the litigation is a massive security failure that unfolded in April, involving the unauthorized movement of 116,500 rsETH tokens. These digital assets were transferred through a cross-chain bridge designed to connect the KelpDAO infrastructure with Unichain. At the time of the malicious attack, the stolen funds were valued at roughly $292 million, making it one of the most significant security incidents of the year for the restaking sector.
Ever since the dust settled from the initial exploit, a major point of contention and public disagreement between the two protocols has centered on the bridge’s exact security configuration. KelpDAO alleges that LayerZero actively reviewed and endorsed a setup that relied upon a single Decentralized Verifier Network, commonly referred to as a DVN, rather than issuing critical warnings to the project that such a configuration created an inherently dangerous single point of failure.
Furthermore, the lawsuit alleges that in the aftermath of the security breach, LayerZero attempted to shift the narrative by blaming KelpDAO for deploying and utilizing that specific design. However, it is crucial to note that these assertions currently represent the legal allegations put forward in Evercrest’s court filing. LayerZero has not been found legally liable by a court of law, and the initial filing does not legally establish that Evercrest’s comprehensive account of the events is entirely accurate. This distinction remains especially critical in a complex legal dispute where technical accountability and responsibility for a major bridge failure form the very core of the ongoing litigation.
Bridge Security Is Becoming A Legal Question Too
Historically, cross-chain security failures and protocol exploits have been treated almost exclusively as technical incidents within the decentralized finance community. Typically, when a bridge gets exploited, independent blockchain investigators trace the movement of the stolen funds, core developers work swiftly to patch the underlying vulnerabilities, and various protocols engage in public debates or private discussions over who configured what parameters.
However, the high-stakes legal case initiated by Evercrest Technologies against LayerZero threatens to push these complex technical discussions into an entirely different and uncharted arena: the courtroom. As decentralized finance continues to mature and attract hundreds of millions—and sometimes billions—of dollars in institutional and retail capital, the interactions between different layers of software infrastructure are drawing intense scrutiny.
If major infrastructure providers review, suggest, or explicitly recommend specific security configurations that are subsequently implemented by third-party applications, courts may eventually be forced to decide what legal responsibility and liability accompany that technical advice. The implications of such a judicial precedent would extend far beyond the immediate parties involved in this specific lawsuit, KelpDAO and LayerZero.
Modern blockchain interoperability systems fundamentally depend on multiple protocols integrating various pieces of software, third-party libraries, and complex trust assumptions that they did not design entirely by themselves. When massive sums of money move fluidly through these interconnected systems, disagreements regarding who understood the inherent risks, who vetted the code, and who bears ultimate responsibility can quickly escalate from standard engineering disputes into multi-million-dollar legal battles.
For now, the filing of this lawsuit marks the formal beginning of that difficult legal process rather than its ultimate conclusion. The exploit itself took place back in April, but the fierce fight over who bears the ultimate financial and legal responsibility for the disaster is only now beginning to make its way through the judicial system in British Columbia.
This article was written by the News Desk and edited by Samuel Rae.
Leave a Reply