layer

According to CoinDesk, after KelpDAO was attacked resulting in a loss of $292 million, the industry's scrutiny of the security of cross-chain infrastructure continues to heat up, with approximately $4 billion in assets having completed or currently migrating from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP).The DeFi protocol Lombard is the latest project to join this migration trend. The protocol announced it would abandon LayerZero and migrate over $1 billion in Bitcoin-backed assets to Chainlink CCIP, stating that this decision stemmed from a comprehensive internal security review following the April attack incident.Lombard issues two types of Bitcoin-backed tokens—LBTC and BTC.b—and will prioritize the migration of assets on chains such as Solana, Etherlink, Berachain, Corn, and TAC, while terminating the use of LayerZero on Morph and Swell. Lombard stated that the reason for choosing CCIP is its independent node operators, built-in rate limiting mechanisms, and audited infrastructure. Additionally, the protocol will adopt Chainlink's cross-chain token standard to achieve asset cross-chain circulation through a burn-and-mint model.Previously, Kelp DAO, Solv Protocol, Re, and the cryptocurrency exchange Kraken have all completed similar migrations, with these projects collectively transferring approximately $4 billion in assets. Chainlink Labs Chief Business Officer Johann Eid stated, "We are witnessing a continued wave of risk-averse migration within the industry."

According to CoinDesk, Kraken announced that it will use Chainlink's cross-chain interoperability protocol CCIP, replacing LayerZero as the exclusive cross-chain infrastructure for its wrapped assets, covering kBTC and more wrapped assets in the future. This migration involves over $3 billion in TVL, following a $292 million LayerZero-related cross-chain attack incident that occurred in April. Kraken stated that the migration will cover networks such as Ink, Ethereum, Unichain, and Optimism. kBTC is set to launch in 2024, with a current market value of approximately $260 million. Coinbase had previously also chosen Chainlink CCIP as the sole cross-chain bridge solution for about $7 billion in wrapped tokens.

Global financial infrastructure giant DTCC (whose subsidiary processed $47 trillion in securities transactions in 2025) announced on Tuesday that it will integrate Chainlink as the data and orchestration layer for its upcoming tokenized collateral platform.DTCC's Collateral AppChain will utilize the Chainlink Runtime Environment (CRE) and its data standards to support eligibility checks, valuations, margin calculations, collateral optimization, and settlement functions, with a target to go live in Q4 2026.Nadine Chakar, DTCC's Global Head of Digital Assets, stated that the goal is to achieve near real-time collateral management between global markets and blockchain through tokenization and distributed ledger technology, operating 24/7. Chainlink co-founder Sergey Nazarov described collateral management as "the killer application that traditional finance has been waiting for." The platform is designed as a shared infrastructure for collateral providers, recipients, managers, third-party agents, and custodians, rather than a bilateral institutional chain. This collaboration continues the foundation of previous partnerships between the two parties, such as in the Smart NAV pilot project.

Movement announced that it has completed the acquisition of the on-chain Vault infrastructure project Canopy, further integrating key financial infrastructure within the Movement Network. Canopy has previously been an important part of the Movement ecosystem, primarily responsible for building the Vault layer on the Movement Network, with its smart contracts allowing users to allocate assets and strategize on-chain with independent strategy managers.After this acquisition, Canopy will collaborate more closely with the on-chain credit protocol MovePosition, and Movement is gradually building a complete on-chain financial infrastructure stack covering modules such as Vault, credit, and yield strategies. Movement stated that most public chain ecosystems still rely on third parties to provide core financial primitives, while Movement hopes to achieve deeper technical collaboration between Vault contracts and other components of the network through self-built and internally integrated methods.For developers, this means they can directly integrate core protocols that are continuously iterating; for partners, it means stronger consistency between the underlying infrastructure and the development team; for users, it is expected to provide a more unified on-chain financial product experience. The official also revealed that MovePosition and Canopy will gradually operate as a unified infrastructure, with more integration details to be announced in the coming weeks.

According to monitoring by Catcher Predict, in the predicted market event "LoL: Top Esports vs Pajama Ninjas (BO3) - LPL Group Advancement" on Polymarket, the "Yes" option for the sub-market "Any Player Quadra Kill" has experienced a sharp fluctuation in win rate, soaring from 50% an hour ago to the current 75.5% (a fluctuation of 25.5%). Please note the impact of related breaking news.

The Ethereum Layer 2 network Starknet developed by StarkWare officially launched strkBTC, a new type of asset based on Bitcoin, designed to achieve privacy balances and anonymous transfers through zero-knowledge proof (ZK) technology, while maintaining composability with DeFi applications.After the launch of strkBTC, it supports "re-anonymization," allowing assets to be bridged back to a new, unassociated Bitcoin address, and provides compliance auditing and asset screening functions.

According to monitoring by Catcher Predict, in the predicted market event "LoL: BNK FEARX vs T1 (BO3) - Esports World Cup Korea Qualifiers Playoffs" on Polymarket, the "Yes" option win rate for the sub-market "Any Player Pentakill" has experienced a sharp fluctuation, dropping from 47.55% an hour ago to the current 24.35% (a fluctuation of 23.2%). Please note the impact of relevant breaking news.

According to CoinDesk, the game public chain behind Axie Infinity, Ronin, will migrate from an independent sidechain to an Ethereum Layer 2 network through a hard fork on May 12, which is expected to result in approximately 10 hours of network downtime, during which all transfers, swaps, contract interactions, and on-chain gaming activities will be paused.This upgrade will introduce the OP Stack architecture and the "Proof of Distribution" allocation model, rewarding builders based on their actual contributions to the network, while significantly reducing the RON inflation rate from over 20% to less than 1%. Additionally, 90 million RON originally allocated for staking rewards will be moved to the treasury fund, and the market transaction fee will be increased from 0.5% to 1.25% to enhance security, scalability, and reshape the token economy.

According to monitoring by Catcher Predict, in the predicted market event on Polymarket "LoL: JD Gaming vs Anyone's Legend (BO3) - LPL Group Advancement," the "Yes" option for the sub-market "Any Player Quadra Kill" has experienced a dramatic fluctuation in win rate, soaring from 50.5% an hour ago to the current 90% (a fluctuation of 39.5%). Please note the impact of related breaking news.

According to analyst Tom Wan's monitoring, despite LayerZero issuing an apology statement, several protocols with a total TVL of approximately $2 billion have announced their migration to Chainlink CCIP, including KelpDAO ($1.5 billion), SolvProtocol ($600 million), and re ($200 million).Meanwhile, the top assets still using the LayerZero OFT standard include: USDe/sUSDe (Ethena), weETH (Etherfi), USDT0 (Tether), thBILL (Theo), and WBTC (Bitgo), with specific migration progress to be determined by project announcements.Previously, LayerZero formally apologized for poor communication regarding security incidents over the past three weeks. The official acknowledged that its internal RPC was attacked by the Lazarus Group and admitted to mistakenly allowing LayerZero Labs DVN to act as a 1/1 verification node for high-value transactions, leading to a single point of risk.

LayerZero Labs posted on the X platform that the internal RPC used by LayerZero Labs was attacked by the Lazarus Group in the past three weeks, resulting in the compromise of the true source of its DVN (Decentralized Verification Network), while external RPC providers faced DDOS attacks. This incident affected 0.14% of applications and approximately 0.36% of asset value.LayerZero Labs stated that asset security is currently intact, and since April 19, over $9 billion in funds have been completed across chains through the protocol. In response to security risks, LayerZero Labs has stopped providing services for its DVN in a 1/1 configuration, and all default configurations for channels will be migrated to at least a 3/3 or 5/5 multi-DVN mode.Additionally, in response to an incident three years ago where multi-signature holders mistakenly used hardware wallets for personal transactions, LayerZero Labs has removed that signer and changed wallets, while also developing a OneSig custom multi-signature system. LayerZero Labs recommends that developers lock configurations to avoid relying on default settings and plans to launch an asset management platform Console to enhance security monitoring.

According to market news, LayerZero Labs co-founder and CEO Bryan Pellegrino had a heated debate with security researchers today in the ETHSecurity Community Telegram group. The core controversy includes: since LayerZero Labs can immediately upgrade a default library contract without a time limit to forge messages (similar to the case where rsETH was hacked), the LZ OFT, valued at over $3 billion, is recently at risk of being stolen; researcher Banteg pointed out that mainstream projects like Ethena and EtherFi were still using this default library contract weeks ago, and currently, there is still $178 million worth exposed to risk, with these funds coming from projects that are still using the default library.On-chain data shows that LayerZero Labs multi-signature signers participated in non-multi-signature activities such as meme coin trading, DEX exchanges, and cross-chain bridging, which means that the multi-signature keys in the formal environment were connected to websites, increasing phishing risks. Regarding the multi-signature signers of LayerZero using production environment keys for trading activities, Bryan confirmed that the related transactions were completed by members of the multi-signature team, but denied that it was "meme coin trading," explaining it as "testing PEPE on the LZ OFT token standard," and stated that the involved member has been removed. Bryan also suggested that project parties "directly fix configurations" instead of using default configurations to reduce risks. Banteg subsequently tagged a long list of LayerZero users still using the default library contract, pointing out that these projects should migrate to fixed configurations as soon as possible.

According to Ambcrypto, Coinbase has partnered with Amazon Web Services (AWS) to jointly launch a new payment layer that allows AI Agents to autonomously make micro-payments using USDC.The solution integrates Coinbase's wallet infrastructure and the x402 payment protocol into Amazon Bedrock's AgentCore Payments system. Developers can build AI agents that autonomously discover services, pay on demand, and complete tasks without human intervention.Reports indicate that the x402 protocol is based on the HTTP 402 "Payment Required" standard, with transactions completed in about 200 milliseconds at a cost of just a fraction of a cent, supporting high-frequency low-value machine-native payments. The system also includes enterprise-level budget control and compliance tools.

According to market news, Solv Protocol announced the migration of over $700 million of SolvBTC and xSolvBTC from the LayerZero cross-chain bridge to Chainlink's CCIP, and the deprecation of LayerZero support on networks such as Corn, Berachain, Rootstock, and TAC.Solv stated that this move is based on the latest security review and recent cross-chain attacks, positioning CCIP as the standard cross-chain infrastructure. This migration follows Kelp DAO's shift to Chainlink after its LayerZero-based bridge suffered an attack of approximately $292 million in rsETH.

The Bitcoin TAP protocol ecological project BIT (@dmt_bit_) has released a new roadmap, announcing a focus on the narrative of "Bitcoin Security Budget Layer," with tokens being directly issued to Bitcoin miners every block as a new source of miner subsidies.The BIT team disclosed that currently only the $NAT token enjoys the miner subsidy mechanism under the TAP protocol, and this mechanism is hardcoded in the protocol's source code (effective only for the dmt-nat token), making it unavailable for other DMT projects. The TAP protocol has also not publicly disclosed any third-party security audits to date.BIT has submitted a code upgrade proposal to TAP, hoping to open this mechanism for use by all DMT tokens, but it was rejected by the TAP officials.According to the roadmap, BIT will next develop a new protocol based on a TAP fork—any DMT token deployment party can customize the token issuance rules and miner distribution methods (including distribution by mining pool weight, independent miner prize accumulation, mixed distribution, etc.) through a single inscription, eliminating any hardcoded privileges for projects. A third-party security audit will be completed before the mainnet launch of the new protocol. $BIT will serve as the native token of the new protocol, and the ecological development of the protocol will continue to empower $BIT.

DTCC (Depository Trust & Clearing Corporation) CEO Frank La Salla stated that the company is collaborating with multiple high-performance Layer 1 blockchains to explore migrating complex corporate actions such as dividend payments and tender offers to on-chain processing.La Salla mentioned at the Consensus 2026 conference that most blockchains still lack efficiency in handling corporate actions, while DTCC needs to process millions of dividend payments daily, thus requiring support from Layer 1 networks with high throughput and stability. DTCC is one of the core infrastructures of the U.S. capital markets, handling approximately $20 trillion in U.S. Treasury and securities transactions daily. The organization plans to launch a tokenized securities platform test in July this year, aiming for a broader rollout in October.La Salla believes that "tokenized collateral" could become the first large-scale institutional application scenario for blockchain. In the future, Asian institutions could even access dollar liquidity in real-time through on-chain collateral during New York's Sunday hours. However, he also warned that blockchain still faces issues such as scalability, liquidity fragmentation, and risk management, especially the efficiency of "net settlement" in traditional financial systems, which remains difficult to replicate in a decentralized environment.

In response to KelpDAO's accusations against LayerZero regarding the rsETH security incident, LayerZero CEO Bryan Pellegrino tweeted a detailed response, stating that much of the content is completely false.Bryan pointed out that KelpDAO initially used LayerZero's default MultiDVN or DeadDVN configuration and later manually migrated to the 1/1 configuration; under the 1/1 configuration, almost 100% of the transaction volume came from rsETH; LayerZero's documentation repeatedly states that the 1/1 configuration is not recommended for production environments and provides specific transaction records and document screenshots as evidence.

Kelp DAO announced that it will migrate its re-staked token rsETH to Chainlink CCIP, stating that this move is to enhance security.Previously, the cross-chain bridge built by Kelp DAO based on LayerZero was attacked on April 18, resulting in hackers stealing approximately 116,500 rsETH, involving an amount of about $292 million, and using the related assets as collateral to borrow WETH on Aave v3. Regarding the cause of the vulnerability, LayerZero previously stated that the issue stemmed from Kelp DAO using a single DVN verification path configuration instead of multiple independent verifications. Kelp DAO responded that this configuration was the default setting and that LayerZero had confirmed its security without indicating any related risks. LayerZero CEO Bryan Pellegrino subsequently denied this claim, stating that Kelp DAO had actively modified the default multi-DVN configuration. Both parties are currently still in ongoing disputes over the attribution of responsibility.