Lombard Switches from LayerZero to Chainlink CCIP as Post-Hack Migrations Top $4B
Lombard has become the latest protocol to migrate from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP), extending a broader wave of departures that has now moved more than $4 billion in value off LayerZero.
Momentum picked up after an April 2026 exploit hit Kelp DAO's LayerZero-powered bridge, draining 116,500 rsETH worth roughly $292 million. LayerZero said it "made a mistake" by permitting its own verifier network to secure high-value assets under the configuration used in the incident, while also stating that the single-verifier setup was not formally approved by staff.
A series of high-profile migrations followed. Kraken said it will replace LayerZero with Chainlink CCIP as the exclusive cross-chain infrastructure for kBTC and all future Kraken-wrapped assets, pointing to enterprise-grade security and Chainlink's ISO 27001 and SOC 2 Type 2 certifications. Kelp DAO shifted rsETH to CCIP in early May as disagreements over responsibility for the hack persisted.
Other large moves included Solv Protocol's $700 million migration of tokenized Bitcoin to CCIP on May 7, covering SolvBTC and xSolvBTC, as well as re.xyz moving $475 million in TVL. Both cited CCIP's security design—including 16 independent validator nodes and built-in rate limits—as a key factor.
Chainlink says CCIP has processed more than $28 trillion in cumulative on-chain transaction value and averages about $90 million in weekly token transfers. It also says it is the only oracle platform holding both ISO 27001 and SOC 2 Type 2 certifications.
LayerZero has responded by removing support for 1-of-1 DVN configurations and said it plans to move most routes toward stricter 5-of-5 verifier setups. The team added that despite the migrations, more than $9 billion in bridged assets has continued to flow through LayerZero infrastructure since April 19.
The migration streak highlights rising market sensitivity to cross-chain security and the premium teams place on audited, enterprise-grade infrastructure, with bridges still among DeFi's most frequently targeted layers.
