link

After KelpDAO was attacked, resulting in a loss of $292 million, the industry's scrutiny of the security of cross-chain infrastructure has intensified. Approximately $4 billion in assets have completed or are in the process of migrating from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP). The DeFi protocol Lombard is the latest project to join this migration trend. The protocol announced it would discontinue the use of LayerZero and migrate over $1 billion in Bitcoin-backed assets to Chainlink CCIP, stating that this decision stemmed from a comprehensive internal security review following the April attack incident.Lombard issues two types of Bitcoin-backed tokens—LBTC and BTC.b—and will prioritize the migration of assets on chains such as Solana, Etherlink, Berachain, Corn, and TAC, while terminating the use of LayerZero on Morph and Swell. Lombard stated that the reason for choosing CCIP is its independent node operators, built-in rate limiting mechanisms, and audited infrastructure. Additionally, the protocol will adopt Chainlink's cross-chain token standard to facilitate asset cross-chain circulation through a burn-and-mint model.Previously, Kelp DAO, Solv Protocol, Re, and the cryptocurrency exchange Kraken have all completed similar migrations, with these projects collectively transferring approximately $4 billion in assets. Chainlink Labs Chief Business Officer Johann Eid stated, "We are witnessing a continued wave of risk-averse migration within the industry."

According to The Block, Sharplink CEO Joseph Chalom stated that the New York Stock Exchange and Nasdaq are advancing 24/7 trading, and the U.S. Depository Trust & Clearing Corporation is promoting tokenized collateral, along with Bullish's acquisition of Equiniti, indicating that the public equity on-chain process may be faster than the market expects.Meanwhile, several Ethereum reserve companies have significantly retreated from their summer 2025 highs, with a noticeable contraction in the market value to net asset value ratio. Chalom mentioned that some companies are under pressure due to prematurely issuing preferred stock or convertible bonds; Sharplink focuses more on equity financing and staking yields while trying to keep the balance sheet simple.He also stated that over the past year and a half, Bitcoin and Ethereum have behaved more like risk assets, but as stablecoins, tokenized assets, DeFi, and AI applications expand on Ethereum, Ethereum may further differentiate from Bitcoin in the long term.

According to CoinDesk, Kraken announced that it will use Chainlink's cross-chain interoperability protocol CCIP, replacing LayerZero as the exclusive cross-chain infrastructure for its wrapped assets, covering kBTC and more wrapped assets in the future. This migration involves over $3 billion in TVL, following a $292 million LayerZero-related cross-chain attack incident that occurred in April. Kraken stated that the migration will cover networks such as Ink, Ethereum, Unichain, and Optimism. kBTC is set to launch in 2024, with a current market value of approximately $260 million. Coinbase had previously also chosen Chainlink CCIP as the sole cross-chain bridge solution for about $7 billion in wrapped tokens.

Global financial infrastructure giant DTCC (whose subsidiary processed $47 trillion in securities transactions in 2025) announced on Tuesday that it will integrate Chainlink as the data and orchestration layer for its upcoming tokenized collateral platform.DTCC's Collateral AppChain will utilize the Chainlink Runtime Environment (CRE) and its data standards to support eligibility checks, valuations, margin calculations, collateral optimization, and settlement functions, with a target to go live in Q4 2026.Nadine Chakar, DTCC's Global Head of Digital Assets, stated that the goal is to achieve near real-time collateral management between global markets and blockchain through tokenization and distributed ledger technology, operating 24/7. Chainlink co-founder Sergey Nazarov described collateral management as "the killer application that traditional finance has been waiting for." The platform is designed as a shared infrastructure for collateral providers, recipients, managers, third-party agents, and custodians, rather than a bilateral institutional chain. This collaboration continues the foundation of previous partnerships between the two parties, such as in the Smart NAV pilot project.

The Ethereum treasury company SharpLink posted on the X platform that since launching the ETH treasury strategy, the company's cumulative staking rewards in Ethereum have reached 19,277 ETH. In addition, the Ethereum staking rewards obtained by the company last week amounted to 477 ETH.

The Depository Trust & Clearing Corporation (DTCC) announced that its blockchain-based collateral management platform, Collateral AppChain, will integrate Chainlink infrastructure to drive traditional financial markets towards 24/7, near real-time collateral management and settlement. DTCC stated that the platform is built on the Besu blockchain and will utilize Chainlink's Runtime Environment (CRE) and data standards to support asset pricing, valuation, margin calculation, collateral optimization, and settlement processes. The platform achieves real-time collateral movement across institutions, markets, and time zones through asset tokenization and smart contract automation.

On May 9 and 10, the Chainlink network recorded 282,170 and 264,090 unique active LINK addresses, respectively, the highest levels since September 2025. The surge in on-chain activity comes against the backdrop of several institutional-grade DeFi projects announcing their migration of cross-chain infrastructure to Chainlink CCIP. On May 7, Solv Protocol announced the completion of a security review following the April Kelp DAO vulnerability incident and decided to migrate over $700 million in tokenized Bitcoin assets (SolvBTC and xSolvBTC) from LayerZero to Chainlink CCIP.Previously, Kelp DAO had also announced the migration of its rsETH infrastructure to Chainlink CCIP. These initiatives represent a significant shift of institutional-grade DeFi infrastructure from LayerZero to the Chainlink cross-chain ecosystem. Additionally, earlier this month, data showed that whale wallets holding between 100,000 and 10 million LINK increased their holdings by 32.93 million LINK within 30 days.

The Nasdaq-listed Ethereum treasury company SharpLink (SBET) announced its first-quarter financial report for the period ending March 31, 2026. Currently, the company's ETH holdings have increased to 873,000 coins (an increase of about 3,000 ETH since the end of March), with a GAAP-valued cryptocurrency asset scale of approximately $1.7 billion.Since launching the ETH treasury strategy in June 2025, the ETH per share metric (ETH Concentration) has increased from 2 to 4.02, with a total of about 18,800 ETH generated from staking and on-chain earnings. Driven by the active management strategy of ETH, Q1 revenue has significantly increased year-on-year to $12.1 million.

According to Forbes, Galaxy, under Novogratz, announced a partnership with the Ethereum treasury company Sharplink to launch the "Galaxy Sharplink Onchain Yield Fund," with a total scale of $125 million, expected to officially launch in a few weeks.Of this, $100 million comes from Sharplink's Ethereum treasury, and $25 million is injected from Galaxy's own funds. Galaxy will serve as the exclusive manager of the fund, responsible for protocol selection, position management, and risk control. The fund will focus on active DeFi strategies such as lending and liquidity provision, aiming for an annualized return of over 10%.

SlowMist has issued a security warning stating that a high-risk phishing activity targeting TRON wallet users has been discovered. Attackers created a fake Chrome extension for the TronLink wallet, using Unicode bidirectional control characters and Cyrillic homographs to disguise the brand name. After installation, the extension loads a complete phishing page through a remote iframe, forming a "shell-core separation" credential theft chain.The malicious extension name uses homographs for disguise, and its Chrome Store page inherits the high user count and positive reviews of the real extension, lowering the review threshold. There is very little local code, only loading remote pages, making static analysis nearly impossible to detect malicious behavior. The remote phishing page perfectly replicates the official TronLink web wallet interface, stealing mnemonic phrases, private keys, Keystore files, and passwords, and relaying them in real-time via a Telegram Bot.Built-in anti-analysis features disable right-click, developer tools, drag-and-drop, and printing, and redirect based on the geographic and language settings of Russian users to evade detection. SlowMist recommends immediately uninstalling suspicious extensions, clearing local storage, checking for abnormal traffic, and if credentials have been entered, creating a new wallet and transferring assets immediately.

According to analyst Tom Wan's monitoring, despite LayerZero issuing an apology statement, several protocols with a total TVL of approximately $2 billion have announced their migration to Chainlink CCIP, including KelpDAO ($1.5 billion), SolvProtocol ($600 million), and re ($200 million).Meanwhile, the top assets still using the LayerZero OFT standard include: USDe/sUSDe (Ethena), weETH (Etherfi), USDT0 (Tether), thBILL (Theo), and WBTC (Bitgo), with specific migration progress to be determined by project announcements.Previously, LayerZero formally apologized for poor communication regarding security incidents over the past three weeks. The official acknowledged that its internal RPC was attacked by the Lazarus Group and admitted to mistakenly allowing LayerZero Labs DVN to act as a 1/1 verification node for high-value transactions, leading to a single point of risk.

WORLD3 today announced the official launch of its decentralized AI routing network RouterLink, enabling the permanent domain routerlink.ai. This official version brings three core upgrades compared to the previous Alpha stage: complete Web2 payment support (Stripe credit card/debit card/Apple Pay/Google Pay), direct connection to over 60 cutting-edge purebred flagship models (without quantization, without distillation), and official production-level endorsements from three major cloud providers: AWS, Microsoft Azure, and Google Cloud.WORLD3 disclosed that the RouterLink network currently supports over 68 models, covering more than 20 providers, with uptime locked at 99.9%, and daily settlement flow exceeding $1.5 million $WAI. The launched purebred flagship models include Claude Opus 4.7, GPT-5.5, Gemini 3.1 Pro Preview, DeepSeek V4 Pro, Grok 4.3, Qwen3-Max, Llama 4 Maverick, Kimi K2.6, GLM 5.1, MiniMax M2.7, etc., all provided at full specifications. The cumulative $450K quota from the three major cloud collaborations has been fully utilized — including the public inclusion of the AWS Customer Case Study, Microsoft for Startups Level 4 (highest level) + $300K AI Grants, and direct connection to Google Cloud Vertex AI.WORLD3 stated that this official launch also opens up the enterprise procurement channel: Stripe payments and $WAI on-chain payments run in parallel, allowing developers to access the complete catalog of 68 models within 60 seconds after registering their email and recharging with a credit card. The subsequent roadmap includes the RouterLink mainnet, GPU computing power market, an Agent skill market linked with TapClaw, and an enterprise version SLA service that is already in pilot with some clients.

The largest lending protocol Tydro under Kraken's Ink Layer 2 announced yesterday that it will remain in a market pause state until the completion of the Chainlink price oracle migration. On May 4, the risk management agency Chaos Labs notified Tydro that its oracle provider had been attacked, with an attack pattern similar to that of a nation-state actor, and recommended an immediate pause of all markets.Tydro stated that there were no abnormal price feeds to its market before or after the pause, and user positions were unaffected. About 48 hours later, Chaos Labs confirmed that the compromised keys had been rotated, and technically, operations could resume, but Tydro chose to continue the pause until the second push oracle was in place. The completion of the Chainlink migration will trigger a 48-hour time lock, during which a four-hour grace period will also be set, allowing borrowers with health factors below 1 to repay or add collateral without being liquidated. Tydro is a white-label deployment of Aave v3, and the total market size has recently exceeded $700 million.

According to Cointelegraph citing Santiment data, Chainlink whales and shark addresses holding between 100,000 to 10 million LINK have accumulated an additional 32.93 million LINK over the past month, an increase of about 7.7%. Historically, this is usually a bullish signal, often indicating that prices will rise.

According to Onchain Lens monitoring, the U.S. government (Brian Krewson seized funds) deposited 2,466 UNI into Coinbase Prime, worth $8,410; 152,925 CRO, worth $10,689; and 1,589 LINK, worth $15.703 million.

According to market news, Solv Protocol announced the migration of over $700 million of SolvBTC and xSolvBTC from the LayerZero cross-chain bridge to Chainlink's CCIP, and the deprecation of LayerZero support on networks such as Corn, Berachain, Rootstock, and TAC.Solv stated that this move is based on the latest security review and recent cross-chain attacks, positioning CCIP as the standard cross-chain infrastructure. This migration follows Kelp DAO's shift to Chainlink after its LayerZero-based bridge suffered an attack of approximately $292 million in rsETH.

Kelp DAO announced that it will migrate its re-staked token rsETH to Chainlink CCIP, stating that this move is to enhance security.Previously, the cross-chain bridge built by Kelp DAO based on LayerZero was attacked on April 18, resulting in hackers stealing approximately 116,500 rsETH, involving an amount of about $292 million, and using the related assets as collateral to borrow WETH on Aave v3. Regarding the cause of the vulnerability, LayerZero previously stated that the issue stemmed from Kelp DAO using a single DVN verification path configuration instead of multiple independent verifications. Kelp DAO responded that this configuration was the default setting and that LayerZero had confirmed its security without indicating any related risks. LayerZero CEO Bryan Pellegrino subsequently denied this claim, stating that Kelp DAO had actively modified the default multi-DVN configuration. Both parties are currently still in ongoing disputes over the attribution of responsibility.

According to The Block, after experiencing a bridge attack of approximately $292 million last month, Kelp DAO decided to abandon LayerZero and instead adopt Chainlink's cross-chain infrastructure.Kelp DAO will use the Chainlink Cross-Chain Interoperability Protocol, which requires 16 independent node operators to validate cross-chain transactions, becoming the first major protocol to leave LayerZero after the attack. During the attack, the LayerZero-driven OFT bridge used a 1-of-1 single validator configuration, with 47% of LayerZero applications using the same configuration at that time. LayerZero subsequently announced the cessation of single validator configurations.Kelp DAO stated that migrating to Chainlink CCIP directly addresses the architectural vulnerabilities in the attack. rsETH will also adopt a cross-chain token standard. As part of the DeFi United rescue operation, LayerZero has donated and lent approximately 10,000 ETH to Aave.

According to Reuters, the U.S. Securities and Exchange Commission (SEC) has delayed the review of the first batch of predictive market ETFs, resulting in the postponement of more than 24 products originally scheduled for launch. Insiders revealed that the SEC is requesting issuers to provide further clarification on product mechanisms and information disclosure details, and this delay is expected to be temporary.Issuers such as Roundhill Investments, Bitwise Asset Management, and GraniteShares submitted applications in February this year to launch ETF products linked to real-world events such as election results, economic recessions, tech layoffs, and oil prices.According to SEC rules, ETF applications typically become effective automatically 75 days after submission unless the regulatory agency intervenes. Currently, Roundhill has set May 5 as the effective date, and Bitwise and GraniteShares' products are also expected to launch around the same time. The market is closely watching whether the SEC will ultimately approve these products that open up the "event contract" asset class.Bitwise Chief Investment Officer Matt Hougan stated, "This is a rapidly maturing field, and regulation is maturing in parallel," noting that innovative products like Bitcoin ETFs have also gone through a lengthy review process but ultimately launched successfully.