Lombard shifts $1B+ in bitcoin-backed assets to Chainlink CCIP, phasing out LayerZero after $292M exploit
Lombard Finance, one of DeFi's largest bitcoin-native liquid staking platforms, is migrating more than $1 billion in bitcoin-backed assets away from LayerZero's bridge infrastructure and onto Chainlink's Cross-Chain Interoperability Protocol (CCIP). The protocol said it intends to fully deprecate LayerZero across its cross-chain stack.
The move follows an April 2026 exploit that drained about $292 million from KelpDAO's rsETH product, which relied on LayerZero-based bridge infrastructure.
The shift is part of a broader retreat from LayerZero bridges across DeFi. Roughly $4 billion in assets have already moved, or are in the process of moving, from LayerZero-based bridging to Chainlink CCIP.
Lombard's internal security review reportedly found CCIP's design—built on decentralized oracle networks and multiple independent validation layers—to provide materially stronger assurances than its prior LayerZero setup.
Lombard said the change should be seamless for users, with existing cross-chain functionality remaining live during the transition. The key change is in the underlying validation model, aimed at making the bridge layer significantly harder to exploit.
Chainlink's momentum has also been bolstered by a recent SOC 2 Type 2 examination completed for CCIP, a compliance standard more commonly associated with enterprise cloud and financial infrastructure providers. Chainlink is positioned as the only major oracle and interoperability provider with that level of certification. SOC 2 Type 2 indicates an independent auditor tested that the security controls operated effectively over an extended period.
Combined with the post-exploit migration wave, the shift has helped push Chainlink-related total value locked above $4 billion.
Lombard's decision carries added weight in Bitcoin DeFi because it manages bitcoin-backed assets, including its LBTC liquid staking token, meaning the flows moving across bridges are denominated in the world's largest cryptocurrency. By adopting CCIP, Lombard is effectively backing a multi-layer validation approach in which independent oracle networks verify transactions before finalization on the destination chain, aiming to reduce the attack surface highlighted by the KelpDAO incident.
The rapid $4 billion migration from LayerZero to CCIP is reshaping the competitive landscape for cross-chain infrastructure. A key risk to monitor is concentration: if CCIP becomes DeFi's dominant bridge layer, the ecosystem could trade one set of vulnerabilities for systemic reliance on a single piece of infrastructure securing billions in cross-chain assets.
