Chainlink emerges as the unlikely $3B winner of KelpDAO exploit as DeFi projects dump LayerZero

A notable development has hit the crypto markets. Crypto projects with more than $3 billion in total value locked have migrated their cross-chain infrastructure to Chainlink’s Cross-Chain Interoperability Protocol (CCIP) following a $292 million exploit at KelpDAO, which heightened scrutiny of bridge security across decentralized finance. Chainlink confirmed the migration wave, saying four protocols, including KelpDAO, Solv Protocol, Re, and Tydro, had begun decommissioning legacy oracles and bridge systems in favor of CCIP. The shift has also fed into LINK’s market performance.

data shows the token rose 15% to $10. 52, its highest level since January, as traders responded to the acceleration in CCIP adoption. Blockchain analytics firm Santiment said the rally came alongside a tightening in LINK’s available supply on exchanges.

Market Dynamics

According to the firm, LINK's exchange reserves fell by 13. 5 million LINK over five weeks, representing more than 10. 5% of the exchange-held supply recorded in early April.

Chainlink's LINK Price Performance and Exchange Reserves (Source: Santiment) The price move reflects a broader reassessment of Chainlink’s role in crypto infrastructure. After years of being known primarily for price feeds and oracle services, the network is now becoming a direct beneficiary of DeFi’s search for safer cross-chain rails. Why are DeFi protocols embracing Chainlink’s CCIP?

Cross-chain bridges allow tokens, NFTs, and data to move between otherwise separate blockchain networks. This means these platforms let users shift liquidity between ecosystems, such as moving assets from Ethereum to Solana, without relying on a centralized exchange. That function has become essential as DeFi has spread across multiple blockchains.

Market Impact

Lending markets, staking tokens, stablecoins, and tokenized assets increasingly depend on infrastructure that can move value between networks without fragmenting liquidity or locking users into a single chain. However, bridges have also become one of crypto’s most frequently attacked pieces of infrastructure. This is because they often rely on complex verification systems and hold large pools of locked assets, making them attractive targets for hackers.

Chainalysis has described cross-chain bridges as one of the blockchain industry’s major security risks. As of 2022, more than $2 billion had been stolen across 13 bridge hacks, with North Korean-linked groups among the most active attackers. That history has pushed DeFi protocols toward infrastructure that can offer more standardized security controls.

Chainlink’s CCIP, which launched on mainnet in July 2023, has become one of the main beneficiaries of that shift. CCIP uses Chainlink’s decentralized oracle networks, the same infrastructure behind the data feeds that secure large parts of DeFi. Chainlink says those networks now include more than 2,000 decentralized oracle networks in production, securing over $110 billion in value and powering more than 70% of DeFi.

Crypto markets are watching this development closely as investors weigh its potential impact on prices.