DeFi Intel
Home · Guides · LayerZero (ZRO) Explained: Omnichain Messaging and 2026 Guide

LayerZero (ZRO) Explained: Omnichain Messaging and 2026 Guide

TL;DR

  • LayerZero is the most-used omnichain messaging protocol in 2026, connecting more than 80 blockchains (Ethereum, Solana, all major L2s, Aptos, Sui, TON, Berachain, Hyperliquid L1) and processing the cross-chain plumbing for Tether's USDT0, Stargate v2.
  • LayerZero V2 (late January 2024) replaced V1's Oracle/Relayer split with modular Decentralized Verifier Networks (DVNs) and Executors, letting each application choose its own security stack from 30+ providers (Google Cloud, Polyhedra, Nethermind, Polymer, BlockDaemon, etc.).
  • The ZRO token launched on June 20, 2024 with a controversial Sybil-filtering "donation-required" airdrop claim. It governs protocol parameters and is increasingly subject to buyback-and-distribute economics under V2 fee revenue.
  • USDT0, launched January 2025, crossed US$100B in cumulative cross-chain volume by late June 2026 — the largest omnichain stablecoin and a direct competitor to Circle's CCTP V2. Tether made a strategic investment in LayerZero Labs in February 2026.

Table of contents

What is LayerZero?

LayerZero is an omnichain messaging protocol that lets a smart contract on one blockchain send arbitrary data and value to a smart contract on another blockchain. It is the largest protocol of its kind by both daily message count and total value transferred. By April 2026 LayerZero connects 80+ chains including Ethereum mainnet, Solana, all major Ethereum layer-2s (Arbitrum, Optimism, Base, Polygon, Avalanche, BNB Chain, ZKsync Era, Linea, Scroll, Mantle, Mode, Blast, Sonic, Sei), Aptos, Sui, TON, Berachain, Hyperliquid L1, and more than two dozen long-tail and bespoke chains.

LayerZero is not a bridge in the traditional "lock-and-mint" sense — it is a messaging primitive. Bridges are built on top of it: Stargate v2 for canonical USDC and other liquid assets, USDT0 for Tether. Tokens that adopt the Omnichain Fungible Token (OFT) standard gain native cross-chain functionality without going through a third-party bridge.

The architectural innovation of LayerZero V2, live since late January 2024, is the modular security stack: each application configures its own combination of DVNs (Decentralized Verifier Networks) for message verification plus an Executor for delivery. This lets a high-value protocol like USDT0 choose multiple DVNs from different security providers (e.g., LayerZero Labs + Polyhedra + Google Cloud), while a lower-value testnet bridge can choose a single DVN. The model is conceptually similar to Hyperlane's Interchain Security Modules (ISMs).

Origins and funding

LayerZero was founded in 2021 by Bryan Pellegrino (CEO), Caleb Banister, and Ryan Zarick (CTO). The three had worked together on earlier engineering ventures; Pellegrino's background includes a stint as a professional poker player and an early career as a machine-learning engineer.

LayerZero Labs is the for-profit core contributor company, headquartered in Vancouver with offices in New York and London. Funding has totaled approximately US$315M across multiple rounds:

The capital base — and the elite venture roster — gave LayerZero the runway to ship V2, build out the DVN marketplace, and resist competitive pressure from CCIP, Wormhole and Hyperlane.

V1 (2022) vs V2 (Jan 2024)

LayerZero V1 went live in early 2022 with the Ultra Light Node (ULN) design. Each cross-chain message in V1 was verified by exactly two parties:

The ULN design depended on the Oracle and Relayer being independent: as long as they were not colluding, an attacker would have to compromise both to forge a message. In practice, critics argued this was a two-of-two trust assumption, and that the default LayerZero-Labs-operated Relayer left a single trusted entity at the heart of every V1 message. The criticism — most prominently from L2BEAT and the Hyperlane / Connext / Wormhole ecosystem — pushed LayerZero to redesign the trust model in V2.

LayerZero V2, generally available on January 29, 2024, made three architectural changes:

  1. DVN marketplace replaces the Oracle. Each application chooses a set of DVNs (Decentralized Verifier Networks) — independent verifier networks, each operated by a different company — and sets a quorum (e.g., "any 2 of 3").
  2. Executor replaces the Relayer. Executors are decoupled from verification — they just deliver the message after DVN attestation, and any party can run an Executor.
  3. Security Stack configurability: every application sets its own DVN combination, quorum threshold, and Executor independently — there is no global "LayerZero security" anymore, only per-application security profiles.

V2 also introduced horizontal composability (multiple messages atomically), fee abstraction (pay in stablecoins instead of native gas), and lzCompose (chained cross-chain calls) — features that USDT0 and Stargate v2 use.

How a LayerZero message flows

A V2 message has six conceptual steps:

  1. Source contract calls Endpoint.send() with destination chain ID, destination address, payload bytes, fee in native gas (or fee abstraction).
  2. Endpoint emits a message event on the source chain.
  3. DVN(s) monitor the source chain, observe the emission, and sign an attestation that the message was authentically emitted. Each application's configured DVN quorum must reach attestation threshold.
  4. DVN attestations posted to the destination chain MessageLib.
  5. Executor monitors the destination chain, sees the threshold reached, and submits the destination-side delivery transaction with sufficient gas.
  6. Destination contract receives lzReceive(srcChainId, srcAddress, nonce, payload) and processes the message.

Total end-to-end latency is typically 30 seconds to 5 minutes depending on source-chain finality (Ethereum mainnet finality is the bottleneck; on most L2s finality is faster but still defaults to a security-conservative wait).

DVNs explained

A Decentralized Verifier Network (DVN) is the core security primitive of V2. Each DVN is operated by an independent company that runs verifier nodes monitoring source chains; when a configured message is emitted, the DVN signs an attestation that the message is authentic and posts it to the destination chain.

By 2026 the DVN marketplace includes more than 30 providers, including:

Each application chooses a Security Stack: which DVNs to use, what threshold (e.g., "2-of-3 from {LayerZero Labs, Google Cloud, Polyhedra}"), and an Executor. USDT0 uses a higher threshold than most apps (specifically several major DVNs in concert), reflecting Tether's risk preferences for their multi-billion-dollar omnichain reserve.

The DVN marketplace is conceptually similar to but more developed than Hyperlane's Interchain Security Modules (ISMs) and Wormhole's NTT verifier-pluggability. The recent paper The Price of Interoperability: Exploring Cross-Chain Bridges and Their Economic Consequences studies how DVN-style modularity shifts the economics of cross-chain security and finds it broadly favourable for high-value bridges that can pay for multiple DVNs.

Executors explained

The Executor is the role that actually delivers the message on the destination chain. After DVN quorum attestation, the Executor:

  1. Submits the destination-side transaction.
  2. Pre-funds gas in the destination chain's native token.
  3. Optionally pre-pays for downstream calls if the source contract used lzCompose.
  4. Earns a fee paid by the source-chain caller.

Executors are decoupled from verifiers in V2 — a malicious Executor can refuse to deliver but cannot forge or re-order messages without DVN collusion. The default Executor is LayerZero Labs' Executor, but applications can register custom Executors and many high-volume integrations (Stargate, USDT0) run their own.

Omnichain Fungible Tokens (OFT)

Omnichain Fungible Token (OFT) is LayerZero's standard for tokens that exist natively across multiple chains as a single canonical asset. The traditional bridge model (Multichain, Wormhole bridge, etc.) produces a wrapped version of the token on each destination chain (wUSDC, anyUSDC, etc.), fragmenting liquidity and creating depeg risk if the bridge fails.

OFT solves this by giving the token contract on each chain a controlled mint / burn capability bound to the LayerZero Endpoint. When a user moves the token from chain A to chain B:

  1. The OFT contract on chain A burns (or escrows) the user's tokens.
  2. A LayerZero message is emitted with the user's destination address and amount.
  3. DVNs attest, Executor delivers.
  4. The OFT contract on chain B mints the equivalent amount to the user.

The result is a single canonical asset with synchronized total supply across chains. By 2026 OFT is used by:

OFT is a direct competitive answer to Wormhole NTT (Native Token Transfers) — both are standards for natively multi-chain tokens, with OFT having a meaningful adoption lead in 2026 because of Tether's USDT0 endorsement and Stargate's incumbent position.

USDT0: Tether's omnichain USDT

USDT0, launched January 2025, is the most economically significant LayerZero deployment to date. It is Tether's official LayerZero-based omnichain USDT — a single canonical USDT that exists natively on Ethereum, Tron, Solana, Aptos, Sui, BNB Chain, Base, Arbitrum, Optimism, Polygon, Avalanche, Mantle, Berachain, Hyperliquid L1 and more than two dozen other chains.

The structural problem USDT0 solved: before USDT0, "USDT on Avalanche" or "USDT on Polygon" was a third-party-bridged version that did not have a clean redemption path back to Tether's mint authority on Ethereum and Tron. Each bridged version was a wrapped IOU subject to bridge risk. USDT0 makes Tether's mint/burn authority itself omnichain via LayerZero V2: when a user sends USDT0 from Ethereum to Avalanche, the Ethereum-side OFT burns and the Avalanche-side OFT mints, with no third-party bridge in the middle.

USDT0 passed US$50B in cumulative cross-chain volume in April 2026 and crossed US$100B on June 25, 2026 — roughly 525 days after launch. Tether underscored the bet with a strategic investment in LayerZero Labs in February 2026. That makes USDT0:

USDT0 is operated jointly by Tether Limited and Everdawn Labs, with LayerZero V2 as the messaging substrate and a curated multi-DVN security stack.

Stargate v2 and the STG token

Stargate, originally launched April 2022, is the canonical LayerZero-based liquidity bridge — the protocol that lets users swap native USDC, USDT, ETH and other liquid assets across chains using shared liquidity pools instead of wrapped tokens. Stargate v2, released 2024, is a complete redesign on top of LayerZero V2:

Stargate was originally operated by Stargate Finance as a separate organisation with its own token, STG. That changed in 2025: the LayerZero Foundation acquired Stargate for roughly US$110M in ZRO, with ~94.8% of staked STG voting in favor. The Stargate DAO was dissolved, STG holders swapped into ZRO at a fixed 1 STG : 0.08634 ZRO ratio, and Stargate revenue now funds ZRO buybacks (50% of revenue during a six-month transition split with stakers, 100% thereafter) — from September through November 2025 alone, $1.2M of Stargate revenue was used to buy ZRO on the open market.

Hyperliquid's native bridge

Hyperliquid, a leading on-chain perpetuals exchange, runs its own L1 chain (Hyperliquid L1). Its native deposit-and-withdrawal bridge to Arbitrum is secured by Hyperliquid's own validator set rather than by LayerZero.

LayerZero's connection to the Hyperliquid ecosystem is instead through omnichain (OFT) tokens deployed on the chain, not through the native bridge.

The ZRO token, airdrop and Sybil controversy

The ZRO token launched on June 20, 2024 — three years after LayerZero Labs was founded and one of the most-anticipated airdrops of the cycle. Several aspects became controversial:

Despite the controversies the airdrop drew more than 1.3 million claim transactions across LayerZero's supported chains. ZRO trades on most major exchanges and became eligible for buyback-and-distribute mechanics in 2025 as V2 fee revenue scaled with USDT0, Stargate v2 and Hyperliquid throughput.

Competitive landscape: Wormhole, Axelar, IBC, Hyperlane, CCIP, deBridge, Across, Connext/Everclear

The cross-chain messaging market is more crowded than the oracle market. Six leading competitors and what differentiates each:

Protocol Token Security model Strength Weakness
LayerZero ZRO Modular DVNs + Executor Most-used messaging, USDT0, OFT adoption Per-app security configurations vary
Wormhole W 19-validator Guardian Network Solana cross-chain native, NTT, Pyth distribution Feb 2022 bridge $325M hack memory
Axelar AXL Cosmos-SDK chain, permissionless validators Cosmos ecosystem dominance, GMP (general message passing) Throughput limited by Cosmos consensus
IBC n/a (chain-native) Light-client cross-chain Cosmos native, the gold-standard trust-minimized model Limited adoption outside Cosmos
Hyperlane HYPER Modular ISMs Permissionless deployment, fastest-growing Smaller installed base
Chainlink CCIP LINK 3 DONs + RMN Bank/enterprise (SWIFT, DTCC), Risk Management Network Higher latency, more conservative
deBridge DBR Multi-validator network with dispute window Fast finality, intent-based UX Smaller validator set than incumbents
Across ACX UMA optimistic oracle settlement Capital-efficient intent bridge for L2-L2 Settlement-only, not general messaging
Connext / Everclear NEXT / CLEAR Connext relays + Everclear settlement layer Modular intent-clearing Less liquidity than Stargate

The competitive frame in 2026: LayerZero leads in message count and OFT adoption; Wormhole leads in Solana-Ethereum native token movement and is the messaging substrate for Pyth oracle distribution; Axelar dominates Cosmos GMP; CCIP dominates bank/enterprise (SWIFT, DTCC, Sygnum, ABN AMRO); Hyperlane is fastest-growing in modular permissionless deployment; deBridge and Across are the leading fast-finality intent layers. The recent academic surveys SoK: A Review of Cross-Chain Bridge Hacks in 2023, Safeguarding Blockchain Ecosystem: Understanding and Detecting Attack Transactions on Cross-chain Bridges, and Count of Monte Crypto: Accounting-based Defenses for Cross-Chain Bridges all rate the modular-verifier model that LayerZero V2 and Hyperlane use as substantially safer than the federated-validator models of earlier bridges.

Bridge security history (and the 2026 Kelp DAO exploit)

The cross-chain bridge industry has been the most-targeted attack surface in crypto, with cumulative losses well over US$2.8B since 2021. The four largest incidents:

LayerZero's own record is now contested. On April 18, 2026, attackers attributed to North Korea's Lazarus Group drained roughly US$292M of rsETH (116,500 rsETH) from the Kelp DAO LayerZero bridge — the largest crypto exploit of 2026 to date. The attack did not break LayerZero's on-chain contracts: attackers compromised RPC servers relied on by the LayerZero Labs DVN (swapping node binaries and DDoS-ing healthy RPCs to force failover), then forged a cross-chain message that Kelp's 1-of-1 DVN configuration accepted with no second check. LayerZero's postmortem blamed the single-DVN configuration; Kelp countered that LayerZero personnel had approved the setup — and reporting showed roughly 47% of active LayerZero OApps used a 1-of-1 DVN configuration. Kelp paused contracts in time to block a further ~$95M, the Arbitrum Security Council helped freeze over 30,000 ETH of attacker funds, and Kelp subsequently migrated rsETH bridging from LayerZero's OFT standard to Chainlink CCIP.

The takeaway: LayerZero's smart contracts remain unexploited, but the messaging stack is only as strong as the DVN quorum an application configures — and the off-chain infrastructure behind those DVNs. LayerZero's pre-2026 clean record was a major factor in Tether's decision to use LayerZero for USDT0 (USDT0 runs a multi-DVN quorum and was unaffected). The recent paper SoK: A Review of Cross-Chain Bridge Hacks in 2023 provides the canonical academic survey of bridge attack patterns, with companion papers BridgeShield: Enhancing Security for Cross-chain Bridge Applications via Heterogeneous Graph Mining, XChainWatcher, SmartAxe: Detecting Cross-Chain Vulnerabilities in Bridge Smart Contracts, and ConneX: Automatically Resolving Transaction Opacity of Cross-Chain Bridges covering specific defense techniques.

CCTP vs LayerZero+Stargate path

For native cross-chain USDC, two approaches dominate in 2026:

In practice many wallets and aggregators auto-route between CCTP and Stargate based on amount, latency requirements, and gas. CCTP is the preferred path for institutional flows where being native-Circle-USDC matters for treasury accounting. Stargate is the preferred path for retail UX and for chains where CCTP isn't yet live.

Future: account abstraction across chains, ZRO buyback

Two strategic directions LayerZero is pursuing in 2026:

Cross-chain account abstraction: LayerZero's lzRead (read state from another chain in a single transaction) and lzCompose (chain multiple cross-chain calls atomically) primitives are being composed with ERC-4337 account abstraction wallets to deliver "one-click cross-chain UX" — pay gas on chain A while executing a smart-contract action on chain B. Several wallet providers (Safe, Pimlico, Biconomy) shipped LayerZero-based cross-chain AA flows in 2025.

ZRO buyback-and-distribute: as V2 fee revenue scales — driven by USDT0, Stargate v2, Hyperliquid, and the broader OFT ecosystem — LayerZero introduced a buyback-and-distribute mechanism in 2025 that uses a portion of protocol revenue to buy ZRO on the open market and redistribute to stakers. The mechanism is similar in spirit to the Aave Safety Module rewards and Stargate v2's STG buyback, and ties ZRO economic value more directly to messaging volume.

Risks and criticism

Honest assessment of LayerZero risk:

How to send omnichain transactions

As a developer:

  1. Identify your destination chain ID (LayerZero defines a unique 32-bit "EID" per chain) and your source chain Endpoint contract address.
  2. Configure your application's DVN Security Stack: pick DVNs, set quorum threshold (e.g., 2-of-3), pick Executor.
  3. Encode your message payload as bytes.
  4. Call Endpoint.send(MessagingParams) with destination EID, recipient (bytes32), payload, and a fee in native gas.
  5. On the destination side, your contract implements ILayerZeroReceiver.lzReceive() which the Executor will call.
  6. Test on testnet (Sepolia, Arbitrum Sepolia, Optimism Sepolia, Solana Devnet, etc.) before mainnet deployment.

As a user:

  1. To move an OFT-enabled token (USDT0, ENA, USDe, GMX, PENDLE, RDNT etc.): use the token's standard send() UI on its frontend. Choose destination chain, amount, recipient. Pay gas. Receive on destination.
  2. To move USDC: use Stargate or CCTP-aware aggregator (Jumper, LiFi, Socket, Squid) — they auto-route between LayerZero+Stargate, CCTP, and Wormhole NTT depending on cost and speed.
  3. To deposit to/from Hyperliquid: use the Hyperliquid frontend, which routes through Hyperliquid's own native bridge.

Research and reports

For deeper academic reading on cross-chain bridges:

FAQ

What is LayerZero and how does it work?

Omnichain messaging protocol connecting 80+ chains. Each message is verified by application-chosen DVN(s) and delivered by a separate Executor under V2's modular Security Stack model. Underpins USDT0, Stargate, and OFT tokens.

Who founded LayerZero?

Bryan Pellegrino (CEO), Caleb Banister, Ryan Zarick (CTO) in 2021. LayerZero Labs raised ~US$315M from a16z, Sequoia and others, valued ~US$3B.

V1 vs V2?

V1 used Oracle + Relayer (two-of-two trust). V2 (late January 2024) replaced them with modular DVNs and Executors, configurable per app.

What is ZRO?

Governance token, airdropped June 20, 2024 with controversial donation-required claim. 1B max supply. Governs protocol parameters and powers buyback-and-distribute under V2 fee growth.

What are DVNs?

Independent verifier networks (Google Cloud, Polyhedra, LayerZero Labs, Nethermind, BlockDaemon and 30+ others) that sign attestations of source-chain message emission. Apps choose a quorum.

What is OFT?

Omnichain Fungible Token standard — natively multi-chain tokens with synchronized mint/burn, eliminating wrapped-token fragmentation. Used by USDT0, STG, ENA, USDe, GMX, PENDLE etc.

What is USDT0?

Tether's official LayerZero-based omnichain USDT, launched January 2025. US$100B+ cumulative cross-chain volume by late June 2026 — the largest omnichain stablecoin.

LayerZero vs Wormhole vs Axelar vs CCIP vs Hyperlane?

LayerZero — modular DVNs, USDT0, OFT. Wormhole — Guardian Network, Solana strength, Pyth substrate. Axelar — Cosmos SDK GMP. CCIP — 3 DONs + RMN, SWIFT/DTCC. Hyperlane — modular ISMs, permissionless. LayerZero leads message count; CCIP leads enterprise.

Has LayerZero been hacked?

LayerZero's on-chain contracts have not been exploited, but on April 18, 2026 attackers linked to Lazarus Group stole ~$292M of rsETH from Kelp DAO's LayerZero bridge by compromising RPC infrastructure behind the LayerZero Labs DVN under Kelp's 1-of-1 DVN configuration — 2026's largest exploit. Responsibility is disputed between Kelp and LayerZero; Kelp has since migrated to Chainlink CCIP. The bridge industry overall has lost US$2.8B+ since 2021 (Wormhole, Ronin, Nomad, Multichain).

How do I send an omnichain transaction?

Developer: import Endpoint, configure DVN Security Stack, call Endpoint.send(), implement lzReceive(). User: use any OFT token's send() UI, or aggregators like Jumper, LiFi, Socket, Squid.

Glossary

Sources and further reading

About the author

DeFi Intel Research is the institutional research arm of DeFi Intel, a digital-asset trading firm. Our analysts cover cross-chain interoperability, MEV, oracle networks and on-chain market microstructure. We integrate LayerZero V2 and Stargate v2 in our cross-chain execution stack, run a private DVN for internal use, and publish quarterly post-mortems on bridge-related incidents. About the author.

Last updated: 2026-07-15

Related entities

Stay current on this topic

Get the weekly DeFi Intel brief — entity-graph intelligence on layerzero, zro token, layerzero v2, free to your inbox.

Subscribe free See Pro →