Just two months after KelpDAO lost $292 million in a cross-chain bridge exploit linked to a Layerzero configuration vulnerability, a wave of major DeFi protocols is shifting its infrastructure away from Layerzero and toward Chainlink’s Cross-Chain Interoperability Protocol (CCIP). Solv Protocol, Re (re.xyz), and Huma Finance have announced migrations or new integrations involving nearly $1 billion in combined assets, underscoring a broader industry pivot toward default-security architectures.
KelpDAO Incident Triggers Security Reassessment
On April 18, 2026, an attacker drained approximately 116,500 rsETH (worth roughly $292 million at the time) from a Layerzero-powered bridge used by KelpDAO. The stolen funds were later used as collateral on Aave v3. KelpDAO attributed the breach to a “1-of-1 verifier configuration” within Layerzero’s infrastructure, calling it a single point of failure. Layerzero disputed that interpretation, stating that KelpDAO had manually selected a non-recommended single-verifier model against the protocol’s guidance and that such configurations would no longer be supported. The public dispute intensified scrutiny over how Layerzero’s Omnichain Fungible Token (OFT) standard handles verifier setup and whether default configurations are adequate.
Solv Protocol Moves $700M in Tokenized Bitcoin
Solv Protocol announced this week that it is migrating its entire tokenized bitcoin portfolio — including SolvBTC and xSolvBTC — from Layerzero to Chainlink CCIP. The move covers roughly $700 million in assets and affects bridge deployments on Corn, Berachain, Rootstock, and TAC networks. Layerzero support on those chains is being deprecated in phases. “After an extensive security review, Solv is deprecating its Layerzero bridges and migrating to the most secure cross-chain solution in the industry, with SolvBTC and xSolvBTC now officially powered by Chainlink CCIP across all supported chains,” the team wrote. Solv noted that CCIP was already part of its collateral verification stack, making the migration a consolidation rather than a full replacement.
Re Selects CCIP as Exclusive Bridge for reUSD
Re (re.xyz), an onchain reinsurance protocol with over $475 million in protocol TVL, selected Chainlink CCIP as the exclusive cross-chain infrastructure for reUSD, its yield-bearing stablecoin with a market cap exceeding $160 million. Re cited CCIP’s redundant validation by 16 or more independent node operators, native rate-limit circuit breakers, and SOC 2 Type 2 compliance as the deciding factors. “We prioritized track record, third-party audits, and institutional security standards over speed or cost when evaluating bridge options in the wake of recent DeFi exploits,” the team stated.
Huma Finance Joins the CCIP Ecosystem
Huma Finance, a PayFi network, also selected CCIP as the exclusive bridge for its PST yield product. Unlike Solv and Re, Huma was not migrating from an existing Layerzero deployment; its decision was framed as a forward-looking infrastructure choice following the same security reviews that prompted the other protocols to act. The combined scale of these shifts — nearly $1 billion when counting Solv and Re alone — has strengthened Chainlink’s position as a preferred cross-chain standard for protocols managing institutional-grade or high-value assets.
Why CCIP’s Security Model Wins
Chainlink CCIP relies on a fundamentally different security model: each bridge lane uses multiple independent Decentralized Oracle Networks with 16 or more security-reviewed node operators handling validation. Separate codebases manage execution and risk, and built-in rate limits act as circuit breakers if anomalous transfer volumes appear. Chainlink founder Sergey Nazarov remarked on X: “Glad to see all the hard work that Chainlink has put into generating real security is being recognized as valuable by more and more teams in our industry. It seems that focusing on making the secure and reliable solution is what wins in an industry where securing value is a key feature of everyone’s product.”
For holders of rsETH, SolvBTC, xSolvBTC, and reUSD, the migration is designed to be phased with minimal required action. The trend reflects a practical calculation by DeFi teams: when a single misconfiguration can lead to a nine-figure loss, default security architecture matters more than flexibility. The exodus from Layerzero to Chainlink CCIP marks a pivotal moment in cross-chain infrastructure, signaling that the market is voting with its capital for security-first standards.