A bridge configuration flaw on Base and BNB Smart Chain allowed attackers to hijack LayerZero delegate permissions, mint trillions of phantom SAND tokens, and drain approximately $675,000 from the Ethereum vault.
Wyoming transferred its Frontier Stable Token (FRNT) from LayerZero to Chainlink's CCIP following a security review, marking the first time a U.S. state has switched blockchain infrastructure providers for a stablecoin.
BitGo has replaced LayerZero with Chainlink's Cross-Chain Interoperability Protocol (CCIP) as the exclusive cross-chain provider for Wrapped Bitcoin (WBTC), bringing the total value of assets migrating from LayerZero to Chainlink to approximately $14.6-15 billion following recent security concerns.
Virtuals Protocol has migrated from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP) as its exclusive cross-chain infrastructure, moving more than $700 million in VIRTUAL tokens through the new protocol.
Aave published an official postmortem tracing a $230 million exploit to a LayerZero bridge verification failure and announced a sweeping overhaul of its asset-listing standards as DeFi risks shift beyond smart contract bugs.
Following a $292 million KelpDAO exploit, crypto projects with over $3 billion in total value locked migrated their cross-chain infrastructure from LayerZero to Chainlink's CCIP. Solv Protocol moved $700 million in tokenized Bitcoin infrastructure as part of the migration.
Solv Protocol announced migration of SolvBTC and xSolvBTC from LayerZero to Chainlink's Cross-Chain Interoperability Protocol across Corn, Berachain, Rootstock and TAC networks, covering approximately $700 million in assets.
Mantle, EtherFi Foundation, Golem Foundation, Lido DAO, Ethena, LayerZero, Ink Foundation and Tyrdo pledged combined 43,000 ETH to 'DeFi United' recovery effort to restore rsETH backing following the $292 million Kelp DAO exploit.
The Arbitrum Security Council froze $71 million worth of ETH stolen in the $292 million Kelp DAO exploit, with funds only movable through further governance action. Kelp DAO and LayerZero continue to dispute responsibility for the bridge vulnerability.
Attackers drained approximately 116,500 rsETH (roughly $292-293 million) from Kelp DAO's LayerZero-powered bridge, causing emergency freezes across multiple DeFi protocols including Aave, SparkLend, Fluid, and Upshift. The exploit represents 2026's largest crypto hack to date and impacted at least nine protocols.
