
LayerZero suffered a security breach when North Korea's Lazarus Group attacked its internal RPC, revealing a critical misconfiguration that created a single point of failure. In response, major protocols managing around $2 billion in total value locked (TVL) including KelpDAO, SolvProtocol, and re have announced migrating to Chainlink's CCIP for improved security. Despite this, some key assets like Ethena’s USDe and Bitgo’s WBTC still rely on LayerZero’s OFT standard. The incident has raised serious concerns about LayerZero's reliability and trustworthiness, prompting a shift towards more secure cross-chain solutions like Chainlink CCIP.