Kraken is replacing its existing cross-chain infrastructure provider with Chainlink's Cross-Chain Interoperability Protocol (CCIP), becoming the latest crypto firm to move away from LayerZero-linked infrastructure after last month's KelpDAO exploit.
Kraken Swaps LayerZero for Chainlink After KelpDAO Exploit
In a post on X on 14 May, Kraken said it would migrate Kraken Wrapped Bitcoin (kBTC) and all future Kraken wrapped assets to Chainlink CCIP, citing "enterprise-grade infrastructure" and stricter security and risk management standards. The exchange highlighted Chainlink's ISO 27001 and SOC 2 Type 2 certifications, secure-by-default architecture, 16 independent nodes and native rate limits as key reasons for the switch.
Kraken did not disclose a migration timeline but said no action was required from kBTC holders and that further details would follow through official channels. The exchange added that the move would help expand the utility and distribution of its wrapped assets across decentralized finance.
Post-KelpDAO reassessment
The migration comes less than a month after attackers drained roughly $292mn from KelpDAO through a LayerZero-powered bridge, triggering one of the largest DeFi exploits of 2026 so far.
The exploit triggered more than $6bn in outflows from Aave and intensified scrutiny around bridge security, verifier configurations and cross-chain infrastructure dependencies across DeFi.
Blockchain investigators and LayerZero attributed the attack with high confidence to TraderTraitor, a subgroup linked to North Korea's Lazarus Group. Attackers reportedly compromised RPC nodes on LayerZero's verifier network, enabling fraudulent cross-chain messages to be executed.
Kraken has now joined a growing list of protocols that have migrated to Chainlink CCIP following the incident.
Security becomes infrastructure battleground
The episode has accelerated a broader reassessment of how DeFi protocols manage interoperability risk as assets move across multiple blockchain networks.
The KelpDAO exploit exposed vulnerabilities not only in smart contracts but also in oracle configurations, bridge design and protocol interdependencies that can rapidly spread stress across lending markets.
Chainlink has increasingly positioned CCIP as institution-grade infrastructure for tokenized assets and cross-chain settlement, including through partnerships and pilots involving banks, asset managers and financial market infrastructure providers.
Kraken's move signals that security architecture and operational resilience are becoming competitive differentiators as exchanges and DeFi protocols expand deeper into tokenized and cross-chain markets.