← Back to News
Kelp DAO Blames LayerZero Defaults for $290M Exploit
DeFiBearish3 min readApril 20, 2026CoinDesk

Kelp DAO Blames LayerZero Defaults for $290M Exploit

A major $290 million exploit has been attributed by Kelp DAO to LayerZero's default protocol settings. This incident highlights critical security risks within interoperability solutions, potentially impacting the stability and trust in cross-chain DeFi activities.

A significant exploit, resulting in a loss of approximately $290 million, has been detailed by Kelp DAO, a liquid restaking protocol. The protocol claims that the vulnerability stemmed not from their own code, but from the 'default' settings of LayerZero, a prominent cross-chain interoperability protocol. This assertion places the blame squarely on LayerZero's infrastructure for the compromised verifier.

The implications of this exploit are far-reaching for the broader DeFi ecosystem. LayerZero is a foundational technology used by numerous projects to facilitate communication and asset transfers between different blockchains. If its default configurations are found to be inherently insecure, it raises serious questions about the safety of assets and transactions that rely on its services. The sheer scale of the loss underscores the potential for systemic risk within interconnected blockchain networks.

For P2P trading merchants operating on platforms like Binance P2P and Bybit P2P, this event introduces a layer of uncertainty. While the exploit occurred within a DeFi protocol, the underlying technology (LayerZero) is integral to many cross-chain operations. Any perceived instability or security flaw in such core infrastructure can lead to increased market volatility and a general decline in confidence. This could translate into wider spreads as merchants price in higher risk, and potentially reduced trading volumes as users become more cautious.

Merchants should closely monitor the official responses from both Kelp DAO and LayerZero, as well as any subsequent security audits or patches implemented by LayerZero. The resolution of this incident and the steps taken to prevent future occurrences will be crucial in restoring confidence in the cross-chain DeFi landscape and, by extension, the stability of stablecoin markets that P2P traders rely on.