Chainlink has introduced CCIP 2.0, an enhanced version of its cross-chain communication infrastructure designed to enable custom security checks for token transfers. The update comes amid heightened scrutiny of bridge security following a $292 million theft from Kelp DAO in April, which exploited a single-verifier system on a rival bridge.
The new protocol’s default network requires 16 independent node operators to reach a quorum before approving transfers, marking a shift from Chainlink’s previous Risk Management Network as a standalone safeguard. This change aims to address vulnerabilities highlighted by the Kelp DAO incident, which exposed flaws in legacy bridge architectures.
Nearly half of active LayerZero apps, the bridge used by Kelp DAO prior to switching to Chainlink, employed single-verifier setups, according to CoinGecko data. Chainlink’s Chief Business Officer, Johann Eid, said the upgrade responds to “insecure infrastructure” that has historically led to billions in losses.
Kelp DAO’s hack has sparked a dispute over responsibility, with LayerZero alleging the project’s own setup was at fault, while Kelp claimed LayerZero staff had approved the configuration without objection. The alleged involvement of North Korea’s Lazarus Group in the attack remains unconfirmed.
Chainlink’s CCIP 2.0 also incorporates external verifiers from Infosys and Nethermind, expanding its capacity to handle complex security requirements. The move underscores growing industry demand for robust cross-chain solutions amid persistent risks in decentralised finance.
Written by Timothy Mason
Altcoins Desk
