How Does LayerZero Work?
LayerZero is the leading cross-chain messaging protocol, enabling communication across 70+ blockchains. It powers the OFT (Omnichain Fungible Token) standard and acquired Stargate bridge ($345M TVL) in August 2025. In February 2026, LayerZero announced the Zero blockchain with strategic backing from Citadel Securities, DTCC, ICE, and ARK Invest, targeting institutional finance at 2M TPS. ZRO has a semi-annual fee switch referendum that could activate buyback-and-burn, and a major 25.7M token unlock occurred on March 20, 2026.
TVL
$345M
Sector
Bridge
Risk Grade
C+
Value Grade
B-
Core Mechanisms
8.1.3
NovelUltra-light message passing with modular DVN verification: applications configure X-of-Y-of-N security stacks from permissionless DVN marketplace
LayerZero V2 separates message verification from execution. DVNs independently verify payloadHash of cross-chain messages. Applications choose their own security threshold (e.g., 2-of-3 DVNs from Google Cloud, Polyhedra, Axelar). This modular approach is novel — no other bridge delegates security configuration entirely to the application layer.
8.2.3
NovelOFT (Omnichain Fungible Token) standard enabling native cross-chain token transfers via burn-and-mint through LayerZero messaging
OFT tokens are natively transferable across 70+ chains without wrapped representations. Tokens are burned on source chain and minted on destination, maintaining a global supply invariant verified by DVNs. The September 2025 $GAIN exploit showed peer initialization is a critical security boundary.
8.1.2
Stargate liquidity pool bridge enabling instant cross-chain swaps with unified liquidity across chains
Acquired August 2025 for $110M. Stargate uses Delta algorithm for cross-chain liquidity rebalancing with $345M TVL. Liquidity pools on each chain enable instant finality for cross-chain transfers. Revenue (~$2M/yr) feeds into ZRO buyback.
8.4.1
Permissionless executor network delivers verified messages to destination chains for per-message fees
Executors are separate from DVNs — they deliver messages after verification. Any entity can run an executor. Fee is paid by the application or user. Liveness depends on executor profitability.
8.4.2
NovelDVN operators incentivized via verification fees; any entity can build and operate a DVN with custom verification schemes
DVN marketplace is permissionless — Google Cloud, Polyhedra, Axelar, and others operate DVNs. DVN Adapters allow integration of third-party verification systems (native bridges, middlechains). Economic security depends on each application's DVN selection, not protocol-level guarantees.
5.1.1
ZRO token-weighted governance with immutable on-chain fee switch referendum every 6 months; 40.59% quorum required
Semi-annual on-chain vote to activate/deactivate protocol fee switch. If activated, LayerZero charges a fee equal to aggregate DVN + executor cost, converting 100% to ZRO buyback-and-burn. Three referendums held to date. Quorum is 230M ZRO with >50% approval threshold.
1.2.1
3-year linear vesting for strategic partners (32.2%) and core contributors (25.5%) with bi-weekly unlocks
1B total ZRO supply. 38.3% community allocation (includes airdrop). ~252M ZRO circulating (25.2%) after the March 20, 2026 unlock of 25.7M ZRO. Continued unlock pressure through 2027.
1.2.3
Retroactive ZRO airdrop (June 2024) to early LayerZero users based on historical cross-chain activity
ZRO launched via airdrop in June 2024. Extensive Sybil filtering applied but controversy over criteria. Recipients had option to donate to Protocol Guild. Significant initial sell pressure drove price from $4.79 to sub-$3 within weeks.
How the Pieces Interact
A compromised or colluding set of DVNs can forge payloadHash verification, allowing minting of unbacked OFT tokens or execution of malicious cross-chain messages. Applications with weak security stacks (e.g., single DVN) are especially vulnerable. The September 2025 $GAIN exploit demonstrated this at the peer initialization level.
OFT tokens maintain a burn-and-mint invariant across 70+ chains. If any single chain's OFT contract is compromised (unauthorized peer, contract upgrade), tokens can be minted without corresponding burns, breaking the global supply invariant. The attack surface scales linearly with chain count.
With ~25% circulating after the March 2026 unlock, bi-weekly unlocks continue to inject significant new supply into thin markets. Coordinated insider selling at unlock points could crash ZRO price, undermining the economic value of the fee switch buyback mechanism.
Applications choose their own DVN configurations. Inexperienced developers may select weak security stacks (single DVN, low-reputation verifiers) to save on fees. Users interacting with these applications bear the security risk without visibility into the underlying DVN configuration.
The $GAIN exploit showed that unauthorized peer initialization on a new chain can create a backdoor to mint tokens. As OFT deployments proliferate across 70+ chains, the attack surface for peer initialization exploits grows. Each new chain deployment is a potential entry point.
What Could Go Wrong
- DVN collusion risk: applications must configure robust X-of-Y-of-N security stacks; weak configs (single DVN) expose $345M+ in bridged value to forged message attacks
- OFT peer initialization vulnerability exploited in September 2025 ($GAIN token hack) — attackers minted 5B counterfeit tokens via unauthorized peer on Ethereum, causing 84% price crash
- Only ~25% of 1B ZRO supply circulating after the March 20, 2026 unlock of 25.7M tokens; 57.7% allocated to insiders with 3-year vesting creates sustained sell pressure through 2027
DVN Collusion Enables Mass OFT Counterfeiting
TailTrigger: An attacker compromises or colludes with a sufficient number of DVNs in a widely-used security stack, enabling forged cross-chain message verification across multiple OFT deployments simultaneously
- 1.Attacker identifies OFT deployments using a weak DVN security stack (e.g., 1-of-1 or 2-of-2 with correlated DVNs) and compromises the required DVN threshold — Attacker can forge payloadHash verification for any message routed through the compromised security stack
- 2.Forged verification enables minting of unbacked OFT tokens across multiple destination chains without corresponding burns on source chains — Global supply invariant for affected OFT tokens is broken; counterfeit tokens enter circulation on destination chains
- 3.Attacker sells counterfeit OFT tokens on DEXs across multiple chains before the exploit is detected — LP providers suffer losses as counterfeit tokens drain pool liquidity; affected token prices crash as supply inflation is discovered
- 4.Trust in all LayerZero-verified OFT tokens is shattered; protocols delist OFT tokens and users flee cross-chain positions — Cross-chain liquidity evaporates; protocols depending on OFT tokens for cross-chain operations face insolvency; ZRO price crashes as confidence in the messaging layer collapses
Risk Profile at a Glance
Overall: C+ (42/100)
Lower score = safer