KelpDAO lost $292 million in a cross-chain exploit that has already pushed more than $3 billion in total value locked (TVL) onto Chainlink’s Cross-Chain Interoperability Protocol (CCIP). Four DeFi projects — KelpDAO itself, Solv Protocol, Re, and Tydro — are now decommissioning their legacy oracles and bridge systems in favor of CCIP. The move marks one of the largest security-driven migrations in decentralized finance this year.
The exploit that broke the trust
Attackers hit KelpDAO through a vulnerability in cross-chain messaging. LayerZero, the interoperability protocol underpinning the bridge, later admitted fault for allowing Decentralized Verifier Networks (DVNs) to operate without sufficient safeguards. That admission came after the damage was done: $292 million drained from KelpDAO’s contracts.
Cross-chain bridges have been a persistent weak spot. By 2022, over $2 billion had been stolen across 13 bridge hacks, with North Korean-linked groups among the most active attackers. KelpDAO’s breach follows that pattern — a single exploit that cascades through a chain of trust.
Why they’re moving to CCIP
Chainlink’s CCIP offers a different architecture. Instead of relying on a single bridge or a set of DVNs, it hooks into Chainlink’s existing oracle network — the same system that already secures over $110 billion in value and powers more than 70% of DeFi applications. That track record, combined with the KelpDAO fallout, convinced four protocols to pull the plug on older infrastructure.
KelpDAO, Solv Protocol, Re, and Tydro are all in the process of migrating. For each one, it means swapping out the code that connects them to other blockchains. The total value moving across is over $3 billion in TVL, a signal that the industry is willing to uproot established systems when security demands it.
LINK token catches a tailwind
Chainlink’s native token, LINK, jumped 15% to $10.52 after the migration wave became public — its highest price since January 2024. The rally was supported by a sharp drop in exchange reserves. Santiment reported that LINK exchange balances fell by 13.5 million tokens over five weeks, representing more than 10.5% of the April 2024 supply. When tokens leave exchanges, it typically means holders are moving them into long-term storage, reducing immediate selling pressure.
The price action reflects a broader narrative: as more DeFi projects adopt CCIP, demand for LINK to pay transaction fees and secure the network could increase. But the jump also came on the back of fear — the KelpDAO hack reminded everyone how fragile cross-chain security can be.
What’s next for the migrating protocols
The four protocols are still in the middle of decommissioning their old systems. Each one has to verify that CCIP handles their specific use cases — staking, liquid restaking, and synthetic assets — without introducing new bugs. LayerZero, meanwhile, faces questions about whether its DVN model can be made safe enough to prevent another $292 million loss.
No timeline has been set for the full migration. But with $3 billion in TVL riding on the switch, the pressure is on to get it right the first time.
