Lombard Finance, one of the largest Bitcoin-native liquid staking platforms in DeFi, is moving more than $1 billion in Bitcoin-backed assets from LayerZero’s bridge infrastructure to Chainlink’s Cross-Chain Interoperability Protocol. The protocol plans to completely deprecate LayerZero from its cross-chain stack.
The migration follows an April 2026 exploit that drained approximately $292 million from KelpDAO’s rsETH product, which relied on LayerZero-based bridge infrastructure.
A vote of no confidence worth $4 billion
Within the DeFi ecosystem, approximately $4 billion in assets have already migrated or are in the process of migrating from LayerZero-based bridges to Chainlink CCIP.
Lombard’s internal security review reportedly concluded that CCIP’s architecture, which relies on decentralized oracle networks and multiple independent layers of validation, provided significantly stronger guarantees than the existing LayerZero setup.
For Lombard users, the protocol says the transition is seamless. Existing cross-chain functionality remains operational during the migration. The most important change is what happens under the hood: a move from one validation model to another, with the aim of making the bridge layer significantly more difficult to exploit.
Why Chainlink CCIP is winning the migration war
Chainlink recently completed a SOC 2 Type 2 examination for CCIP, a compliance certification typically associated with enterprise cloud providers and financial infrastructure companies. That makes Chainlink the only major oracle and interoperability provider with that level of certification.
SOC 2 Type 2 means that an independent auditor has spent months verifying that Chainlink’s security controls actually work as advertised over an extended period of time, and not just on paper during a snapshot.
That certification, combined with the post-exploitation wave of migration, has helped push Chainlink’s total value above $4 billion.
What Lombard’s move means for Bitcoin DeFi
Lombard’s migration has extra significance because of what it represents in the Bitcoin DeFi ecosystem. The protocol handles Bitcoin-backed assets, specifically the LBTC liquid staking token, meaning the assets flowing through these bridges are denominated in the most valuable cryptocurrency in the world.
By moving to CCIP, Lombard is essentially betting that Chainlink’s multi-layer validation approach, in which transactions are verified by independent oracle networks before being completed on the destination chain, reduces the attack surface that made the KelpDAO exploit possible.
The $4 billion migration from LayerZero to CCIP is reshaping the competitive landscape of cross-chain infrastructure in real time. The risk to look at is concentration. If CCIP becomes the dominant bridge layer for DeFi, a different kind of systemic risk will emerge: a single point of contact for billions in cross-chain assets.