LayerZero Bridge Protocol Review 2026: How It Works, Risks

Blockchains still run as separate systems, and moving tokens or data between them is one of the biggest sources of both utility and risk in crypto. LayerZero is one of the most widely used answers: a messaging protocol that lets applications on one chain send verified instructions to another. This review explains how it works in 2026, what it secures, what went wrong in the April 2026 Kelp incident, and how to use it safely.

On September 28, 2026, DefiLlama tracked about $8.02B locked in LayerZero V2 contracts (DefiLlama), making it one of the largest pieces of cross-chain infrastructure by value secured.

Key Takeaways

LayerZero is a messaging protocol, not a single bridge: apps choose which verifiers (DVNs) must approve each message (LayerZero docs).
About $8.02B sat in LayerZero V2 contracts on September 28, 2026 (DefiLlama), and USDT0, the LayerZero-based version of Tether, held about $3.50B (DefiLlama).
On April 18, 2026, attackers stole about $292M in rsETH from KelpDAO’s LayerZero bridge, which relied on a single verifier (Chainalysis).
LayerZero’s docs now tell integrators to require at least one DVN not operated by LayerZero Labs (LayerZero docs).
The LayerZero Foundation acquired Stargate in 2025 through a proposed $110M STG-for-ZRO swap (Stargate DAO).

What Is LayerZero?

LayerZero is an omnichain interoperability protocol. Instead of holding pooled funds like a classic bridge, it passes messages between smart contracts on different chains. Those messages can carry token transfers, governance votes, price data or any other instruction an application needs (LayerZero docs).

Developers can build on EVM chains, Solana, Aptos and Hyperliquid, and LayerZero publishes endpoint IDs and contract addresses for every supported network on its deployments page (LayerZero docs).

Omnichain vs multichain vs cross-chain

Omnichain: one application whose contracts on many chains act as a single system, such as an OFT token with unified supply.
Multichain: separate deployments of the same app on each chain, with separate liquidity.
Cross-chain: basic asset transfers between two chains without deeper integration.

Core Components

Endpoints: immutable contracts on each chain that send and receive messages (LayerZero docs).
Message libraries: handle how packets are sent and verified.
Decentralized Verifier Networks (DVNs): independent parties that check a message really happened on the source chain before it can execute (LayerZero docs).
Executors: services that deliver a verified message to the destination contract and pay the gas to run it.

How a LayerZero Message Works

1. Send: a user or app calls the source-chain endpoint, which encodes the payload and charges a fee.
2. Verify: each DVN in the application’s security stack independently checks the source transaction; the message only passes when the required DVNs, and any optional threshold, agree.
3. Execute: an executor delivers the message and the destination contract acts on it, for example minting tokens after a burn on the source chain.

The important design choice is that security is set by each application. An app can require one DVN or several, and can add optional DVNs with a threshold (LayerZero docs). That flexibility is powerful, but it also means two apps using LayerZero can have very different risk levels.

Token standards: OFT and ONFT

The Omnichain Fungible Token (OFT) standard burns or locks tokens on the source chain and mints or unlocks them on the destination, keeping one unified supply. ONFT does the same for NFTs (LayerZero docs). USDT0 is the best-known stablecoin example: it locks USDT on Ethereum and mints USDT0 on other chains using OFT (USDT0 docs). For a practical walkthrough, see how to bridge tokens using LayerZero.

Security: The April 2026 Kelp Incident

On April 18, 2026, attackers linked to North Korea’s Lazarus Group stole about $292M (116,500 rsETH) from KelpDAO’s LayerZero bridging adapter (Chainalysis). It was not a smart contract bug. rsETH was configured with a single required verifier, the LayerZero Labs DVN. The attackers poisoned the RPC nodes that DVN relied on so that it saw a burn on Unichain that never happened, and the Ethereum contract released rsETH against it (Chainalysis).

DefiLlama lists the Kelp loss at about $293M, classified as cross-chain message spoofing (DefiLlama). Kelp said the 1-of-1 setup was the default it was given; LayerZero said it had recommended a multi-DVN setup (Chainalysis).

LayerZero’s documentation now states that integrations should configure at least one required DVN that is not operated by LayerZero Labs, and that on chains with only one DVN provider an app should run its own DVN, wait for another provider or defer that chain (LayerZero docs). Available DVNs are listed on the DVN addresses page (LayerZero docs).

What this means for users

Check which DVNs a token or app requires before moving large amounts.
Prefer apps that require two or more independent DVNs.
Remember the protocol is only as strong as the configuration each app chooses.

LayerZero vs Competitors

Wormhole: relies on 19 Guardian nodes and produces 13-of-19 multisignature attestations (Wormhole docs). Security is uniform across apps rather than chosen per app.
Chainlink CCIP: uses Chainlink’s oracle network and risk management layer, often chosen by institutions wanting a single, managed security model (Chainlink).
Axelar: a proof-of-stake network whose validators approve cross-chain messages (Axelar).
LayerZero: the most configurable of the four, with security set per application through DVNs (LayerZero docs).

For a broader ranking, see our guide to the best crypto cross-chain bridges in 2026.

Ecosystem: Stargate and USDT0

Stargate, the liquidity bridge built on LayerZero, came back under LayerZero control in 2025. The LayerZero Foundation proposed acquiring all STG for $110M, swapping 1 STG for 0.08634 ZRO (Stargate DAO), and the vote passed with nearly 95% support, although The Defiant reported that two addresses accounted for more than half of the yes votes (The Defiant). Stargate V2 held about $198.8M in TVL on September 28, 2026 (DefiLlama).

USDT0 has become the largest stablecoin use of LayerZero, with about $3.50B locked on September 28, 2026 (DefiLlama). Our guide to transferring stablecoins across blockchains compares it with Circle’s CCTP.

The ZRO Token

ZRO is LayerZero’s governance token. Basic bridging does not require holding it, since fees can be paid in the source chain’s gas token. Check live price and supply on CoinGecko rather than relying on older figures, as the token has been volatile.

Getting Started

For users

Use an app built on LayerZero, such as Stargate or a token’s official OFT bridge.
Connect your wallet, choose the source and destination chains, token and amount.
Review the quoted fee and confirm; you pay gas on the source chain.
Track the message on LayerZero Scan until it is delivered.

For developers

Start from the LayerZero CLI templates for OApp, OFT or ONFT (LayerZero docs).
Set endpoint IDs from the deployments page, not chain IDs (LayerZero docs).
Configure at least two required DVNs, including one not run by LayerZero Labs (LayerZero docs).
Test every pathway on testnet before mainnet.
Monitor messages and keep a pause mechanism for emergencies.

Risks and Considerations

Configuration risk: as Kelp showed, a single-DVN setup can be a single point of failure (Chainalysis).
Infrastructure risk: DVNs depend on RPC nodes and off-chain systems.
Smart contract risk in each application’s own code.
Liquidity risk for pool-based bridges like Stargate.
Regulatory uncertainty around cross-chain infrastructure.

Conclusion

LayerZero is major cross-chain infrastructure in 2026, securing about $8.02B in V2 contracts (DefiLlama) and carrying USDT0 across chains. Its strength, application-chosen security, is also its main risk. After the Kelp loss, the rule for users and builders is simple: check the DVN configuration, prefer multiple independent verifiers, and never assume that "built on LayerZero" means one uniform level of safety.

FAQs:

1. What is LayerZero protocol?

LayerZero is an omnichain messaging protocol that lets smart contracts on different blockchains send verified messages to each other, used for token transfers, governance and data (LayerZero docs).

2. How much does LayerZero charge for transfers?

Fees depend on the route, destination gas costs and the DVNs an app uses. Apps show a quote before you confirm, so check it each time.

3. Is LayerZero safe to use?

The core contracts are immutable, but safety depends on each app’s DVN setup. The April 2026 Kelp loss of about $292M came from a single-verifier configuration (Chainalysis).

4. What chains does LayerZero support?

EVM chains such as Ethereum, Arbitrum, Optimism and Base, plus Solana, Aptos and Hyperliquid, among others. The full list is on the deployments page (LayerZero docs).

5. How do I bridge tokens with LayerZero?

Use an interface like Stargate or a token’s official OFT bridge, pick chains, token and amount, review the fee and confirm.