Crypto projects moved more than $7 billion in tokens onto Chainlink's CCIP protocol during the second quarter of 2026, and they didn't do it for fun. The trigger was a string of cross-chain bridge hacks totaling roughly $650 million, including a $292 million exploit at KelpDAO that hit a bridge built on LayerZero technology.
Bridges are the weakest link in crypto infrastructure. They're the mechanism that lets a token "teleport" from one blockchain to another, and a single flaw in how a bridge verifies transactions can cost hundreds of millions of dollars. Billions have drained through bridge exploits over the years, Ronin and Wormhole among them, so every fresh hack pushes projects to rethink who they trust to move assets between chains.
The list of projects that switched is long. Mantle moved more than $2.5 billion in MNT tokens onto CCIP, a migration built together with Bybit that ran from July 9 to July 15. KelpDAO shifted $1.5 billion in rsETH, Lombard Finance moved over $1 billion in bitcoin assets, Solv migrated $700 million in tokenized bitcoin, Virtuals moved $700 million of its own token, and Kraken routed more than $330 million in wrapped bitcoin through CCIP. Altogether, the protocol processed $4.9 billion in quarterly volume, up 353% year over year, and the total value secured across Chainlink's network reached $110 billion.
What stands out is who else is paying attention. Fidelity International, which manages more than $1 trillion, launched a tokenized fund called FILQ on Chainlink's infrastructure. State Street, with $5 trillion under management, did the same with a fund called SWEEP. The Depository Trust & Clearing Corporation is integrating Chainlink's data standard, with a planned go-live in the fourth quarter of 2026 — DTCC managing director Nadine Chakar said the move should give the industry a unified on-chain settlement environment. More than 50 banks holding a combined $10 trillion in assets have already joined Project Pangea, an initiative built on the same rails for instant cross-border currency settlement.
None of this makes the risk disappear. Chainlink still relies on a network of nodes, and its defenses haven't faced an attack on the scale of the ones that hit its rivals. But for projects handling other people's money, a track record now counts for more than shaving a few basis points off fees. The real test will come if hackers start pointing their attention at CCIP itself.
