Chainlink Surges as DeFi Projects Shift to Safer Cross-Chain Solutions
By John Nada·May 11, 2026·4 min read
Chainlink sees a surge as DeFi projects migrate to its CCIP following a major exploit at KelpDAO, highlighting security concerns in cross-chain infrastructure.
Following a significant $292 million exploit at KelpDAO, crypto projects with over $3 billion in total value locked are migrating their cross-chain infrastructure to Chainlink’s Cross-Chain Interoperability Protocol (CCIP). This shift highlights a growing emphasis on security within decentralized finance (DeFi) after the breach raised concerns about bridge vulnerabilities across the sector. Chainlink confirmed the migration wave, stating that four protocols, including KelpDAO, Solv Protocol, Re, and Tydro, have begun decommissioning their legacy oracle and bridge systems in favor of the CCIP. This transition has positively impacted LINK’s market performance, with the token seeing a 15% increase, reflecting a broader reassessment of Chainlink’s role in crypto infrastructure.
CryptoSlate data shows LINK rose to $10.52, its highest level since January, as traders responded to the acceleration in CCIP adoption. Blockchain analytics firm Santiment noted that this rally came alongside a tightening in LINK’s available supply on exchanges, with reserves falling by 13.5 million LINK over five weeks, representing more than 10.5% of the exchange-held supply recorded in early April. This increase in price is not just a reaction to current events, but indicative of a long-term trend where Chainlink has transitioned from being viewed primarily for price feeds and oracle services to a crucial player in the DeFi ecosystem’s search for safer cross-chain solutions. Why are DeFi protocols embracing Chainlink’s CCIP?
Cross-chain bridges allow tokens, NFTs, and data to move between otherwise separate blockchain networks. This capability has become essential as DeFi has proliferated across multiple blockchains, enabling users to shift liquidity without being reliant on centralized exchanges. Lending markets, staking tokens, stablecoins, and tokenized assets increasingly depend on infrastructure that can move value seamlessly between networks. However, these bridges have also become prime targets for cyberattacks.
Their complex verification systems and large pools of locked assets make them especially vulnerable. Chainalysis has flagged cross-chain bridges as one of the major security risks in the blockchain industry, citing over $2 billion in losses across 13 bridge hacks since 2022, with North Korean-linked groups among the most active attackers. This history has propelled DeFi protocols toward infrastructure that can offer standardized security controls, making Chainlink’s CCIP, which launched on mainnet in July 2023, a major beneficiary of that shift. CCIP utilizes Chainlink’s decentralized oracle networks, the same infrastructure that secures large portions of DeFi through data feeds.
Chainlink boasts that these networks consist of over 2,000 decentralized oracle networks in production, securing over $110 billion in value and powering more than 70% of DeFi applications. Unlike traditional bridges that depend on a limited set of validators, CCIP is designed to transmit both data and token value across chains, reducing reliance on bespoke bridge designs and enhancing security. For protocols managing hundreds of millions of dollars in assets, cross-chain infrastructure is now being viewed less as mere back-end plumbing and more as a core part of risk management. This reassessment continues to drive the migration towards Chainlink’s offerings, reflecting a broader trend in the DeFi space away from potentially vulnerable systems.
Meanwhile, the migration wave has put LayerZero, the cross-chain platform previously utilized by KelpDAO, under scrutiny. LayerZero issued an apology shortly after the exploit, acknowledging that its post-exploit communication had fallen short and conceding that its security model allowed a high-value application to operate with insufficient safeguards. Initially, LayerZero asserted that its infrastructure functioned as designed, placing the onus on application configuration. However, its subsequent acknowledgment of needing stronger oversight over its Decentralized Verifier Networks (DVNs) marked a significant shift in its narrative.
LayerZero’s architecture offers application developers significant flexibility, which has long been a core advantage. However, the KelpDAO incident has illuminated the potential vulnerabilities that can arise when applications are inadequately configured. The company admitted it made a mistake by allowing its DVNs to serve as the sole verifier for high-value cross-chain transactions without adequate guardrails. LayerZero also revealed a previously unreported incident involving a multisig signer, which inadvertently used LayerZero hardware for a personal trade.
This disclosure aimed to illustrate that the protocol had addressed earlier internal security lapses but added another layer of scrutiny at a time when clients were already reassessing their exposure. Despite the exploit, LayerZero reported that over $9 billion had moved through its infrastructure since the attack, indicating continued reliance on its services. However, this confidence may be diminishing as more protocols consider migrating parts of their cross-chain operations to Chainlink. Tom Wan, head of data at Entropy Advisors, has raised concerns about whether an apology could effectively stem the tide of migration from LayerZero to Chainlink.
Defenders of LayerZero argue that its customizability is a vital advantage, provided application teams prioritize security. Lorenzo Romagnoli, co-founder of USDT0, highlighted that the protocol's model necessitates asset issuers invest in security measures commensurate with the capital at stake.