Lombard has joined a wave of protocols switching to Chainlink CCIP as LayerZero migrations top $4 billion.
Summary
- Lombard, Kraken and several DeFi protocols have abandoned LayerZero for Chainlink CCIP following a $292 million bridge exploit.
- Total assets migrated to Chainlink CCIP now exceed $4 billion across Kelp DAO, Solv, Re.xyz, Kraken and Lombard.
- Chainlink CCIP holds ISO 27001 and SOC 2 Type 2 certifications and routes transfers through 16 independent node operators.
LayerZero exploit sparks industry-wide migration
The shift accelerated after a $292 million exploit drained 116,500 rsETH from Kelp DAO’s LayerZero-powered bridge in April 2026. LayerZero later said it “made a mistake” by allowing its own verifier network to secure high-value assets in the configuration used.
Kraken announced that it was replacing LayerZero with Chainlink CCIP as the exclusive cross-chain infrastructure for kBTC and all future Kraken wrapped assets. The exchange cited enterprise-grade security, ISO 27001 compliance and SOC 2 Type 2 certification as the reasons for the switch.
Kelp DAO moved rsETH to Chainlink CCIP in early May while its dispute with LayerZero over responsibility for the exploit continued to deepen. LayerZero denied that the single-verifier configuration had been approved by its staff.
Solv Protocol shifted $700 million in tokenised Bitcoin, including SolvBTC and xSolvBTC, from LayerZero to CCIP on May 7. Re.xyz followed with $475 million in TVL, citing CCIP’s 16 independent validator nodes and built-in rate limits as the deciding factors.
Chainlink CCIP has supported over $28 trillion in cumulative on-chain transaction value and averages approximately $90 million in weekly token transfers. The protocol is the only oracle platform to hold both ISO 27001 and SOC 2 Type 2 certification.
LayerZero has since removed support for 1-of-1 DVN configurations and announced plans to move most routes toward stricter 5-of-5 verifier setups. Despite the migrations, the protocol said more than $9 billion in bridged assets moved through its infrastructure since April 19.
