Lead

Lombard Finance, one of the largest bitcoin‑native liquid staking platforms, announced that it will migrate more than $1 billion of Bitcoin‑backed assets from LayerZero’s bridge infrastructure to Chainlink’s Cross‑Chain Interoperability Protocol (CCIP). The move follows an April 2026 exploit that drained roughly $292 million from KelpDAO’s rsETH product, which relied on LayerZero, and is part of a broader $4 billion shift of assets from LayerZero to Chainlink across the defi ecosystem.

Background

Bitcoin‑liquid staking protocols allow users to stake Bitcoin and receive a derivative token that can be used across DeFi. These protocols rely on cross‑chain bridges to move assets between blockchains. LayerZero and Chainlink CCIP are two of the most widely used bridge solutions. LayerZero uses a single‑layer validation model, whereas Chainlink CCIP uses decentralized oracle networks and multiple independent validation layers, a design that has recently received a SOC 2 Type 2 audit.

In April 2026, a vulnerability in LayerZero’s bridge infrastructure enabled an attacker to drain about $292 million from KelpDAO’s rsETH product, a loss that shook confidence in the protocol and prompted many projects to reconsider their bridge choices.

What Happened

Lombard Finance’s internal security review concluded that Chainlink CCIP’s architecture offered materially stronger guarantees than LayerZero. The protocol plans to fully deprecate LayerZero from its cross‑chain stack. For users, the transition is designed to be seamless; existing cross‑chain functionality will remain operational during the migration, with the primary change occurring under the hood.

Chainlink recently completed a SOC 2 Type 2 examination for CCIP, the only major oracle and interoperability provider with that tier of certification. The certification confirms that Chainlink’s security controls work over a sustained period, not just at a snapshot audit.

Across the DeFi ecosystem, approximately $4 billion in assets have either already migrated or are in the process of migrating from LayerZero‑based bridges to Chainlink CCIP.

Market & Industry Implications

The migration underscores a shift in the competitive landscape of cross‑chain infrastructure. Chainlink’s multi‑layered validation approach, which requires verification by independent oracle networks before finalizing transactions on the destination chain, is viewed as a significant improvement over LayerZero’s single‑layer model.

Chainlink’s SOC 2 Type 2 certification and the post‑exploit migration wave have helped push Chainlink‑related total value locked above $4 billion. Lombard’s move is particularly significant because it involves Bitcoin‑backed assets, the most valuable cryptocurrency, meaning the assets flowing through these bridges are denominated in Bitcoin.

However, the concentration of assets on a single bridge layer could create a new systemic risk. If Chainlink CCIP becomes the dominant bridge for DeFi, a failure in its infrastructure could expose billions of dollars of cross‑chain assets.

What to Watch

  • The completion of Lombard Finance’s full deprecation of LayerZero and the final rollout of its CCIP migration.
  • Chainlink’s ongoing compliance and security updates following its SOC 2 Type 2 audit.
  • Any further incidents or vulnerabilities discovered in LayerZero or Chainlink CCIP that could influence the broader migration trend.