- BitGo selects Chainlink CCIP as exclusive cross-chain provider for Wrapped Bitcoin, replacing LayerZero.
- The migration covers approximately $7.4 billion in WBTC, bringing total announced LayerZero-to-Chainlink moves to nearly $15 billion.
- The shift follows a $292 million exploit on Kelp DAO's LayerZero bridge, which heightened security concerns across the industry.
- BitGo retains full control over token contracts and transfer limits using Chainlink's Cross-Chain Token standard.
BitGo, the digital asset custody firm, has decided to overhaul the cross-chain infrastructure behind Wrapped Bitcoin (WBTC), the largest tokenized version of bitcoin on the market. The company is dropping its previous integration with LayerZero and adopting Chainlink’s Cross-Chain Interoperability Protocol (CCIP) as the exclusive bridge for all WBTC transfers. This move affects over $7.4 billion in tokenized bitcoin and marks one of the biggest infrastructure changes in the wrapped asset space this year.
The announcement, made on August 4, 2026, adds to a growing wave of migrations away from LayerZero that started after a major security incident earlier in the year. With BitGo’s decision, the combined value of publicly disclosed moves from LayerZero to Chainlink CCIP now sits at roughly $14.6 billion. Other projects that have already made the switch include Mantle, Lombard, Aave, Kraken, and several others, signaling a broader industry shift toward more standardized cross-chain security.
The Scale of the Migration and What It Means for WBTC
WBTC currently holds a market capitalization of about $7.4 billion, according to CoinMarketCap, making it the dominant bitcoin-backed token in decentralized finance. BitGo will standardize all WBTC deployments using Chainlink’s Cross-Chain Token (CCT) standard, which uses a burn-and-mint model rather than traditional lock-and-unlock liquidity pools. This design eliminates the need for bridge reserves sitting onchain and allows BitGo to retain direct ownership of its token contracts. The company can independently configure transfer rate limits and adjust cross-chain settings without handing control to an external bridge provider.
BitGo also confirmed that CCIP will become the default interoperability framework for all future assets it issues. That commitment turns a single product choice into a company-wide standard. The firm’s CEO, Mike Belshe, emphasized that security drove the decision, stating that Chainlink CCIP provides a proven, institutionally adopted protocol that aligns with the controls and risk management their clients expect. Chainlink’s CCIP is the only cross-chain protocol holding both SOC 2 Type 2 and ISO 27001 certifications, which are commonly required by institutional counterparties when evaluating infrastructure risk.
Why the Shift? The KelpDAO Exploit and Industry Reaction
The migration wave gained momentum after a $292 million exploit on Kelp DAO’s LayerZero-powered bridge in April 2026. Attackers compromised internal RPC nodes and used a single-verifier configuration, known as a 1-of-1 DVN setup, to drain funds. Although BitGo’s own LayerZero setup required multiple verifiers and was not directly exposed to that flaw, the incident intensified scrutiny of LayerZero’s flexible verification architecture. A subsequent analysis found that 47% of LayerZero OApp contracts were using the same one-of-one configuration, accelerating migration plans across the industry.
Chainlink’s CCIP addresses these concerns by requiring a minimum of 16 independent, security-reviewed node operators for each bridge lane. These operators are distributed across different regions and hosting environments, reducing the risk of a single point of failure. The protocol also features built-in rate limits that act as automatic circuit breakers, capping outflows before an incident can cascade across chains. LayerZero has since updated its system to prevent single-verifier setups, but the reputational damage from the KelpDAO incident continued to drive departures.
BitGo’s Broader Institutional Push
The WBTC migration fits into a larger strategy by BitGo to expand its institutional-grade service suite beyond traditional custody. Earlier this week, the company launched BitGo Link, a treasury management platform that gives institutional clients a unified dashboard to monitor balances and move assets across BitGo custody accounts and connected cryptocurrency exchanges. The platform routes transfers through BitGo’s Policy Engine, allowing firms to apply internal approval workflows and permission controls across various venues. BitGo has also added quantum-risk management tools for Bitcoin multisignature wallets, including a Quantum Risk Score and exposed-address remediation workflows, to help institutions prepare for future threats from quantum computing.
Additionally, the company has expanded controlled custody access to decentralized finance protocols such as Aave, Spark, and Tesseract. The shift to Chainlink CCIP for WBTC is a key component of this institutional push, allowing BitGo to standardize future cross-chain asset issuance under a single technical framework without relinquishing operational sovereignty. Neither BitGo nor Chainlink has disclosed a firm timeline for the complete migration across all supported blockchain networks, leaving the rollout schedule open-ended.
For existing WBTC holders, the announcement implies no immediate operational changes, as the transition involves a backend infrastructure modification. The migration should reduce fragmentation across chains over time, with a single canonical WBTC contract per network leading to cleaner collateral assumptions for DeFi protocols and more consolidated liquidity. With close to $15 billion in assets now committed to moving from LayerZero to Chainlink CCIP, the industry is clearly voting with its feet on what it considers a more secure and institutionally sound cross-chain standard. The coming months will reveal how quickly BitGo and other projects complete their transitions, but the direction is unmistakable.