Lombard Finance, one of the largest Bitcoin-native liquid staking platforms in DeFi, is moving more than $1B in Bitcoin-backed assets off LayerZero’s bridge infrastructure and onto Chainlink’s Cross-Chain Interoperability Protocol. The protocol plans to fully deprecate LayerZero from its cross-chain stack.
The migration follows an April 2026 exploit that drained roughly $292M from KelpDAO’s rsETH product, which relied on LayerZero-based bridge infrastructure.
A $4B vote of no confidence
Across the DeFi ecosystem, approximately $4B in assets have either already migrated or are in the process of migrating from LayerZero-based bridges to Chainlink CCIP.
Lombard’s internal security review reportedly concluded that CCIP’s architecture, which relies on decentralized oracle networks and multiple independent validation layers, offered materially stronger guarantees than its existing LayerZero setup.
For Lombard users, the protocol says the transition is designed to be seamless. Existing cross-chain functionality stays operational during the migration. The primary change is what’s happening under the hood: a swap from one validation model to another, with the goal of making the bridge layer significantly harder to exploit.
Why Chainlink CCIP is winning the migration war
Chainlink recently completed a SOC 2 Type 2 examination for CCIP, a compliance certification typically associated with enterprise cloud providers and financial infrastructure companies. That makes Chainlink the only major oracle and interoperability provider with that tier of certification.
SOC 2 Type 2 means an independent auditor spent months verifying that Chainlink’s security controls actually work as advertised over a sustained period, not just on paper during a snapshot audit.
That certification, combined with the post-exploit migration wave, has helped push Chainlink-related total value locked above $4B.
What Lombard’s move means for Bitcoin DeFi
Lombard’s migration carries extra significance because of what it represents in the Bitcoin DeFi ecosystem. The protocol handles Bitcoin-backed assets, specifically its LBTC liquid staking token, which means the assets flowing through these bridges are denominated in the most valuable cryptocurrency on the planet.
By moving to CCIP, Lombard is essentially making a bet that Chainlink’s multi-layered validation approach, where transactions are verified by independent oracle networks before being finalized on the destination chain, reduces the attack surface that made the KelpDAO exploit possible.
The $4B migration from LayerZero to CCIP is reshaping the competitive landscape of cross-chain infrastructure in real time. The risk to watch is concentration. If CCIP becomes the dominant bridge layer for DeFi, that creates a different kind of systemic risk: a single point of reliance for billions in cross-chain assets.
