$292M Gone: KelpDAO Is Suing LayerZero and Its Co-Founder Over 2026's Biggest Hack
LayerZero's co-founder Brian Pellegrino is personally named in a lawsuit over the largest crypto exploit of 2026, and the allegation is brutal: the vulnerability was known, and nobody said a word.
KelpDAO, the cross-chain lending protocol that lost $292 million in the hack, filed the suit against LayerZero and Pellegrino this week, accusing them of deliberately concealing weaknesses in their messaging protocol. According to the filing reported by CoinDesk, KelpDAO argues that had those risks been disclosed, the attack could have been prevented entirely.
This is not a case of an anonymous hacker finding a zero-day nobody could have predicted. This is an allegation that the people who built the infrastructure knew it was fragile, said nothing, and let billions in user funds sit on top of it anyway.
Why This Case Hits Different
LayerZero is not a fringe player. It is one of the most widely integrated cross-chain messaging protocols in DeFi, connecting dozens of major protocols across Ethereum, Solana, and beyond. If the allegations hold up in court, this lawsuit does not just damage LayerZero's reputation. It raises an uncomfortable question every DeFi team building on third-party infrastructure needs to answer right now: what do you actually know about the code your protocol depends on?
The $292 million figure makes this the single largest exploit the crypto industry has recorded in 2026 so far. For context, that number eclipses the combined losses from the three largest hacks of all of 2025. The scale alone should make every yield farmer, liquidity provider, and protocol treasury manager stop and reassess.
What the Lawsuit Is Really About
Beyond the money, KelpDAO is attempting to establish something the crypto industry has long resisted: legal accountability at the infrastructure layer. If a protocol provider knows about a critical vulnerability and fails to disclose it to dependent protocols, are they liable? Courts have never ruled on this cleanly. This case could set the precedent.
Pellegrino has not yet responded publicly to the specific allegations. LayerZero has not issued a detailed statement. That silence is notable given the severity of the accusations.
What to Watch Right Now
If you hold funds in any protocol built on LayerZero infrastructure, check the team's public communications for risk disclosures. Watch for LayerZero's official response, which will either contain the situation or accelerate the panic. Watch TVL across LayerZero-connected protocols over the next 48 hours. Outflows will tell you what informed insiders are actually thinking before anyone says it publicly.
The courtroom just became DeFi's most important venue. Pay attention.