Major player shifts vast crypto holdings to Chainlink's cross-chain platform following shocking security breach that eroded trust in rival network.

In a significant shift, Lombard Finance, a major player in the Bitcoin-native liquid staking space, is relocating over $1 billion in assets from LayerZero's bridge infrastructure to Chainlink's Cross-Chain Interoperability Protocol (CCIP). This move marks a deliberate decision to abandon LayerZero from its cross-chain operations entirely.
The catalyst for this change was the high-profile exploit in April 2026, which saw approximately $292 million drained from KelpDAO's rsETH product due to its reliance on LayerZero-based bridges. The repercussions of this breach have been profound, with a substantial migration of assets - roughly $4 billion - either already completed or underway from LayerZero-based bridges to CCIP across the DeFi ecosystem.
Lombard Finance's internal assessment underscored the superior security architecture of CCIP, which leverages decentralized oracle networks coupled with multiple layers of validation. This robust framework offers substantially enhanced protection compared to the existing LayerZero setup, thereby informing the decision to migrate.
For users of the Lombard protocol, the transition process is designed to be unobtrusive, with existing cross-chain functionalities remaining operational throughout the migration period. The key alteration lies in the underlying validation mechanism, with the ultimate goal of bolstering the bridge layer against potential exploits.
Chainlink has recently achieved a significant milestone by completing a SOC 2 Type 2 examination for CCIP, a certification typically associated with major cloud providers and financial institutions. This accomplishment underscores Chainlink's commitment to security and compliance, as it becomes the only major oracle and interoperability provider to attain this level of certification.
The SOC 2 Type 2 examination involves an independent auditor verifying the efficacy of Chainlink's security controls over an extended period, rather than a snapshot audit. This certification, combined with the post-exploit migration trend, has contributed to a surge in Chainlink-related total value locked, now exceeding $4 billion.
Lombard's decision to migrate holds particular significance within the Bitcoin DeFi ecosystem, given its focus on Bitcoin-backed assets, including the LBTC liquid staking token. By adopting CCIP, Lombard is banking on Chainlink's multi-layered validation approach to mitigate the risk of attacks, such as the one that affected KelpDAO.
The broader implications of this $4 billion migration from LayerZero to CCIP are reshaping the competitive landscape of cross-chain infrastructure in real-time. However, a critical risk emerges - concentration. As CCIP potentially becomes the dominant bridge layer for DeFi, it creates a systemic risk, with a single point of reliance for billions of dollars in cross-chain assets.