LayerZero Faces $292M Lawsuit as $15B Flows to Chainlink

LayerZero Hit With Lawsuit Amidst Asset Flight

Evercrest Technologies, the firm behind KelpDAO, is suing LayerZero Labs, its Canadian affiliate, and CEO Bryan Pellegrino over the $292 million rsETH exploit that occurred in April. The lawsuit, filed in British Columbia, alleges negligent misrepresentation, negligence, and defamation, seeking both compensatory and punitive damages. Kelp users have reportedly withdrawn over $650 million since the attack, while Pellegrino maintains the suit is without merit.

$15B Shifts to Chainlink’s CCIP

The fallout from the exploit has prompted a significant migration of assets. By August 4th, projects representing approximately $14.5 billion in assets had announced plans to move from LayerZero to Chainlink’s Cross-Chain Interoperability Protocol (CCIP) – nearly 50 times the amount stolen in the initial hack. BitGo accounted for the largest portion of this shift, with $7.4 billion in Wrapped Bitcoin (WBTC) now utilizing CCIP as its exclusive cross-chain provider.

Security Model Under Scrutiny

The lawsuit centers on claims that LayerZero approved a single-verifier setup for Kelp’s bridge, despite internal warnings about the risks of such a configuration. Evercrest alleges LayerZero assured Kelp there were “no problems” with the default settings. LayerZero contends the decision to use a single verifier rested with Kelp, and that they have since implemented changes, now requiring a minimum of three verifiers for most pathways.

Broader Implications for Cross-Chain Security

The incident highlights the inherent risks in cross-chain bridges and the importance of robust security measures. Wyoming’s Stable Token Commission also moved its FRNT token off LayerZero, citing concerns over access controls and incident disclosures. The situation underscores a broader industry trend towards more secure, multi-signature verification systems and a re-evaluation of reliance on centralized infrastructure within decentralized finance (DeFi).

Source: CryptoSlate