LayerZero is the dominant cross-chain messaging protocol with strong institutional backing (Citadel Securities, DTCC, ICE) and the most widely adopted omnichain token standard. However, its modular security model shifts risk to application developers, the OFT standard has a proven exploit pattern, and large ZRO token unlocks continue through 2027. The fee switch remains unactivated, leaving token holders without direct value accrual.
Risk Breakdown
Top Risks
DVN collusion risk: applications must configure robust X-of-Y-of-N security stacks; weak configs (single DVN) expose $345M+ in bridged value to forged message attacks
OFT peer initialization vulnerability exploited in September 2025 ($GAIN token hack) — attackers minted 5B counterfeit tokens via unauthorized peer on Ethereum, causing 84% price crash
Only ~25% of 1B ZRO supply circulating after the March 20, 2026 unlock of 25.7M tokens; 57.7% allocated to insiders with 3-year vesting creates sustained sell pressure through 2027
Frequently Asked Questions
Is LayerZero safe to use?
What are the main risks of using LayerZero?
What is LayerZero's risk score breakdown?
How does LayerZero compare to other Bridge protocols?
Has LayerZero ever been hacked or exploited?
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.