Virtuals Protocol (@virtuals_io) is migrating its cross-chain infrastructure and its VIRTUAL token from LayerZero to @chainlink's Cross-Chain Interoperability Protocol (CCIP), citing security
Virtuals Protocol (@virtuals_io) is migrating its cross-chain infrastructure and its VIRTUAL token from LayerZero to @chainlink's Cross-Chain Interoperability Protocol (CCIP), citing security as the primary motivation as it builds payment rails for AI agents.
The move places Virtuals in the middle of a broader industry shift that accelerated after attackers linked to North Korea's Lazarus Group stole approximately $292 million (116,500 rsETH) from KelpDAO's LayerZero bridge on April 18, 2026.The breach was not a smart contract hack. There was no reentrancy bug or price oracle manipulation. The KelpDAO incident was an attack on the off-chain verification layer on which many cross-chain protocols depend.
The incident was limited to KelpDAO's rsETH setup because the application relied on a 1-of-1 DVN configuration with LayerZero Labs as the sole verifier, a design LayerZero said directly contradicted its standing recommendation that applications use diversified multi-DVN setups with redundancy. LayerZero has since acknowledged the vulnerability, with LayerZero Labs admitting it "made a mistake" allowing its own decentralized verifier network to act as a 1/1 verifier for high-value transactions, and has since banned the configuration entirely.
Virtuals is the latest in a string of protocols to make the switch. Solv Protocol shifted $700 million in tokenised Bitcoin, including SolvBTC and xSolvBTC, from LayerZero to CCIP on May 7.Re.xyz followed with $475 million in TVL, citing CCIP's 16 independent validator nodes and built-in rate limits as the deciding factors.Kraken also replaced LayerZero with Chainlink CCIP as the exclusive cross-chain infrastructure for kBTC and future wrapped assets.
According to Chainlink Chief Business Officer Johann Eid, roughly $4 billion migrated into CCIP-connected infrastructure in the weeks following the exploit. The appeal of CCIP is partly structural. CCIP maintains the highest level of cross-chain security, backed by a separate Risk Management Network, and is the only interoperability solution that meets three key institutional security standards: SOC 2 Type 1, SOC 2 Type 2, and ISO/IEC 27001:2022.
For Virtuals, the stakes extend beyond simple asset transfers. The protocol is building cross-chain payment infrastructure for AI agents, a use case where bridge reliability is directly tied to the autonomous systems it intends to run on top of it. Chainlink's investment case is increasingly tied to the AI agent narrative, positioning it as core infrastructure for autonomous systems that allocate and move capital, functioning as an "AI financial middleware layer" where agents executing financial operations require oracle systems capable of delivering verified data, programmable payouts, and cross-chain connectivity.
Sources:CoinDesk: Kraken to replace LayerZero with Chainlink for kBTC and future wrapped assetsCoinDesk: Solv Protocol migrates $700 million in tokenized Bitcoin to Chainlink CCIPChainalysis: Inside the KelpDAO Bridge Exploit
