Skip to content

BitGo Drops LayerZero for Chainlink CCIP on $7.7 Billion of WBTC

The custodian is moving the largest wrapped bitcoin token off the bridge provider it chose in 2024, and making Chainlink the default for everything it issues from here on.

Table of Contents

BitGo said Tuesday it has named Chainlink's Cross-Chain Interoperability Protocol the exclusive cross-chain infrastructure for Wrapped Bitcoin, moving more than $7.7 billion of WBTC off LayerZero — the provider BitGo selected for the token in September 2024 — and committing to route every future BitGo-issued asset through CCIP by default.

BitGo plans to standardize WBTC on Chainlink's Cross-Chain Token standard, which replaces the mix of bridge-issued wrapper variants across chains with one canonical deployment per network, using a burn-and-mint model instead of lock-and-unlock liquidity pools — tokens burn on the source chain and mint on the destination, so there's no bridge reserve sitting onchain waiting to be drained. BitGo keeps full ownership of the WBTC token contracts throughout, along with control over transfer limits and cross-chain settings, since the CCT standard requires no CCIP-specific code inside the token contract itself.

CEO and co-founder Mike Belshe framed the decision around risk rather than features: "Security comes first. Always has." Chainlink, for its part, points to certifications no rival protocol holds — SOC 2 Type 2 and ISO 27001 — plus a minimum of 16 independent node operators diversified across regions and organizations securing every CCIP bridge lane.

The exploit behind the exodus

The announcement doesn't mention LayerZero by name, but the timing isn't subtle. It follows the $292 million exploit of Kelp DAO's LayerZero-powered bridge in April — an attack Blockhead covered as it unfolded, when North Korea's Lazarus Group drained 116,500 rsETH by tricking a single-verifier bridge configuration into approving a fraudulent cross-chain instruction, cascading into roughly $196 million in bad debt on Aave. Blockhead's own commentary at the time was blunt about what the incident actually exposed: LayerZero's "Decentralized Validator Network" turned out to be running a 1-of-1 configuration for Kelp and, it later emerged, for other projects too — a single point of failure wearing decentralized branding.

BitGo is far from the first to respond by walking away. Mantle, Lombard, Aave, Kraken, Solv Protocol, Virtuals, and Re have all announced their own moves from LayerZero to Chainlink CCIP since the exploit. What makes BitGo's move the biggest of the batch is size and scope combined: WBTC alone accounts for roughly 45% of the wrapped-bitcoin sector's total market capitalization, and the migration brings the cumulative value of announced LayerZero-to-Chainlink transitions to close to $15 billion.

BitGo's decision to make CCIP the default for all future BitGo-issued assets — not just WBTC — is the more consequential half of the announcement for anyone watching institutional custody. It turns a single product fix into a company-wide standard, and hands Chainlink one of the largest cross-chain mandates in the market at a moment when institutional allocators are increasingly asking custodians hard questions about bridge architecture before, not after, the next exploit.

Neither BitGo nor Chainlink has published a full chain list or completion timeline for the migration.

Latest