Kraken Joins Exodus from LayerZero, Adopts Chainlink CCIP

Kraken has officially migrated its cross-chain infrastructure from LayerZero to Chainlink’s Cross-Chain Interoperability Protocol (CCIP) following the $292 million Kelp DAO exploit in April 2026. The decision, announced on May 15, positions Chainlink as Kraken’s sole partner for securing wrapped tokens, including its Kraken Wrapped Bitcoin (kBTC).

“Chainlink CCIP offers enterprise-grade infrastructure with strict security and risk management requirements,” Kraken stated. These include a secure-by-default design, 16 independent nodes, and native rate-limiting mechanisms—features that have become critical after the Kelp DAO attack exposed vulnerabilities in cross-chain protocols.

LayerZero Fallout After the Kelp DAO Exploit

The Kelp DAO breach on April 18, 2026, remains the largest DeFi exploit of the year. Attackers exploited a vulnerability in LayerZero’s single Decentralized Verifier Network (DVN) setup to forge a cross-chain message, siphoning 116,500 rsETH worth approximately $292 million. LayerZero later attributed the hack to North Korea’s Lazarus Group but maintained the exploit was isolated to Kelp DAO’s specific configuration. However, Kelp DAO countered that the vulnerability stemmed from LayerZero’s default settings.

The incident triggered widespread concerns about the security of cross-chain bridges. Within 48 hours, total value locked (TVL) in DeFi dropped by $13 billion, highlighting the systemic risk posed by such exploits. More than $3 billion in TVL has since migrated from LayerZero to Chainlink CCIP, as protocols reassess their dependence on single-verifier setups.

Other Protocols Follow Suit

Kraken isn’t alone in abandoning LayerZero. Kelp DAO itself is in the process of migrating to Chainlink CCIP as part of its recovery efforts, while Solv Protocol recently moved $700 million in tokenized Bitcoin to the platform. On-chain reinsurance protocol Re also transitioned $475 million in total value locked to Chainlink earlier this month.

Major players like Lido, the largest Ethereum liquid staking protocol, already rely on Chainlink CCIP. Lido has called Chainlink’s security model the “definitive standard” for cross-chain operations, emphasizing its defense-in-depth approach.

Market Reaction

Despite the shift, Chainlink’s native token LINK remains stagnant around $10, down 80% from its 2021 peak. In contrast, LayerZero’s token ZRO has suffered a 30% decline since the April hack and is down more than 80% from its 2024 all-time high, according to CoinGecko.

For LayerZero, the reputational damage continues to mount. Although it issued an apology on May 9 for its handling of the exploit, emphasizing that no other applications were affected, the statement has done little to stem the exodus.

Broader Implications

The fallout from the Kelp DAO exploit underscores the critical need for robust security in cross-chain protocols. Single-verifier designs, while efficient, are increasingly seen as a liability in a DeFi ecosystem that is growing more interconnected—and vulnerable—by the day. As protocols like Kraken and Kelp DAO pivot to Chainlink’s CCIP, it’s clear the industry is prioritizing resilience over speed.

For traders and stakeholders, the mass migration raises questions about the long-term viability of LayerZero and underscores the importance of scrutinizing the underlying infrastructure of DeFi projects. As interoperability becomes a cornerstone of blockchain innovation, the focus will likely shift toward solutions that balance scalability with uncompromising security.

Image source: Shutterstock