Evercrest Technologies, developers of the liquid staking protocol KelpDAO, have filed a lawsuit againt LayerZero and its Co-founder and CEO Bryan Pellegrino. This, over the April exploit that resulted in the release of rsETH worth roughly $294 million.
The claim, filed on 25th September with British Columbia, alleges that LayerZero failed to disclose the weakness and the risks within its protocol. It also claims that LayerZero didn’t attempt to prevent attackers from compromising its security infrastructure.
In an X post, KelpDAO noted,
The exploit was a direct result of LayerZero’s failures—including a failure to disclose weaknesses and risks inherent in LayerZero’s own technology…
Kelp also asserts that LayerZero reviewed and endorsed its deployment before the exploit even took place.
Here, it’s worth pointing out that Pellegrino has since responded to the lawsuit, describing it as “meritless.” He also added that he’s ready to defend himself in court.
How the exploit affected KelpDAO
LayerZero functions as a cross-chain messaging layer for KelpDAO liquid staking. The attacker convinced LayerZero to refine 116,600 rsETH by sending instructions that were valid to receive the asset. The attackers used the stolen rsETH as collateral and received 106,467 ETH worth of ETH.
According to KelpDAO, the compromise was due to attackers gaining session credentials through a security hack of LayerZero and gaining forged cross-chain messages.
So far, a recovery plan has been underway. One of the earliest moves came from the Arbitrum Security Council after it froze 30,766 ETH worth of assets tied to the exploit, preventing them from dispersing on-chain.
In a report from May, however, the protocol confirmed it had completed replenishing the stolen funds by replenishing its rsETH OFT adapter with 116,000 rsETH.
Following the same, KelpDAO resumed normal operations and confirmed that ETH fully backs its rsETH at a 1:1 ratio. The protocol has since moved its cross-chain communication layer to Chainlink CCIP. At the time of writing, Kelp also held roughly 426,819.05 ETH in actual backing.
KelpDAO’s on-chain activity shows signs of recovery
KelpDAO has continued to show signs of growing strength, with the protocol’s Total Value Locked (TVL) being on the rise. TVL measures a protocol’s health by whether investors are depositing their capital into the protocol or not.
Between 19th August and present-day, the TVL added $266.15 million, hitting a high of $1.139 billion at press time. However, these figures were still behind its 15th May level of $1.547 billion.
Kelp’s Earnings have also plummeted to their lowest quarterly levels, with figures of $276,300 according to DeFiLlama. This coincided with its Gross Revenue falling within that period to roughly $6.42 million.
Final Summary
-
KelpDAO’s lawsuit against LayerZero and its CEO pertains to April’s exploit.
-
KelpDAO has replenished the stolen funds and moved its cross-chain communication layer to Chainlink CCIP already.
Be the first to comment