Fact-check findings

The reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.

1. #2[disputed][awaiting moderator]in section: Off-Chain Infrastructure Risk and Nation-State Threat Surface

   “a $135 million Series A+ in 2022 co-led by Sequoia Capital”

   reviewerThe 2022 $135M Series A+ round was co-led by Sequoia CapitalMultiple contemporaneous sources (CoinDesk, Forbes, The Block) report the March 2022 $135M round was co-led by a16z, Sequoia Capital and FTX Ventures together, not by Sequoia alone. The cited Fortune source does not discuss the 2022 round at all. Omitting FTX Ventures (whose venture arm collapsed alongside FTX in Nov 2022) is a notable omission on a risk-intelligence page.
   Proposed correction (not yet applied)

   a $135 million Series A in 2022 co-led by a16z, Sequoia Capital, and FTX Ventures
   citedfortune.com/crypto/2023/04/04/blockchain…m-funding-round/
2. #3[disputed][awaiting moderator]in the timeline

   “LayerZero v1 mainnet launched; $135M Series A+ raised co-led by Sequoia Capital.”

   reviewerLayerZero v1 mainnet launched in 2022 with a $135M Series A+ raised co-led by Sequoia Capital, sourced to the Fortune 2023 articleSame underlying error as the Funding section: the timeline event also attributes the 2022 round solely to Sequoia and cites an article (Fortune 2023) that never discusses the 2022 round.
   Proposed correction (not yet applied)

   LayerZero v1 mainnet launched; $135M Series A raised co-led by a16z, Sequoia Capital, and FTX Ventures.
   citedfortune.com/crypto/2023/04/04/blockchain…m-funding-round/
3. #4[disputed][awaiting moderator]in section: Off-Chain Infrastructure Risk and Nation-State Threat Surface

   “a $55 million Series B in April 2025 with participation from Andreessen Horowitz, Circle, OKX, Sequoia Capital, and OpenSea”

   reviewerIn April 2025 LayerZero raised a $55M Series B with participation from Andreessen Horowitz, Circle, OKX, Sequoia Capital, and OpenSeaThe page conflates two distinct events: the April 2023 Series B ($120M, multiple co-investors including Circle, OKX, Sequoia, OpenSea, a16z) and an unrelated April 2025 transaction in which a16z alone purchased $55M of ZRO tokens under a lock-up. Presenting the 2025 event as a new 'Series B' with five participating investors misattributes the 2023 investor roster to a different, later, single-investor transaction. The cited source does not support any part of this sentence.
   Proposed correction (not yet applied)

   a $55 million standalone token purchase by Andreessen Horowitz in April 2025, following its earlier participation (alongside Circle, OKX, Sequoia Capital, and OpenSea) in the April 2023 Series B round
   citedtechcouver.com/2025/05/28/bryan-pellegri…zero-3b-startup/
4. #5[disputed][awaiting moderator]in the timeline

   “$55M Series B raised with Andreessen Horowitz, Circle, OKX, Sequoia Capital, and OpenSea participating.”

   reviewerOn April 17, 2025, LayerZero raised a $55M Series B with Andreessen Horowitz, Circle, OKX, Sequoia Capital, and OpenSea participatingSame underlying error as the Funding section finding; also, the cited Techcouver source does not mention this transaction at all.
   Proposed correction (not yet applied)

   Andreessen Horowitz purchases $55M worth of ZRO tokens under a 3-year lock-up, a standalone transaction distinct from the 2023 Series B in which Circle, OKX, Sequoia Capital, and OpenSea had participated.
   citedtechcouver.com/2025/05/28/bryan-pellegri…zero-3b-startup/
5. #6[disputed][awaiting moderator]in the timeline

   “Arbitrum Security Council freezes 30,766 ETH of attacker funds.”

   reviewerThe Arbitrum Security Council froze 30,766 ETH of attacker-controlled funds on April 18, 2026, the same day as the exploitThe timeline entry dated 2026-04-18 bundles the ETH freeze into the same day as the exploit, but multiple sources place the freeze on April 20, two days later (the same day as the separate 2026-04-20 timeline entry for LayerZero's initial statement). This is a date-in-prose error, not merely a labeling nuance.
   Proposed correction (not yet applied)

   Two days later, on April 20, 2026, the Arbitrum Security Council froze 30,766 ETH of attacker funds.
   citedwww.coindesk.com/tech/2026/04/20/layerze…-korea-s-lazarus

No source the reviewer could reach confirms or contradicts the claim.

1. #7[unverifiable][awaiting moderator]in section: Off-Chain Infrastructure Risk and Nation-State Threat Surface

   “LayerZero Labs has raised approximately $318 million in total funding across six rounds from 53 investors, achieving a $3 billion valuation.”

   reviewerLayerZero Labs has raised approximately $318 million across six rounds from 53 investorsThe $318M total is broadly consistent with third-party aggregators, but round-count (6 vs 7) and investor-count (53 vs 54-55) vary by source depending on how the 2025 a16z token purchase and an undisclosed Feb 2026 raise are categorized. No section in the page cites a specific source for this sentence, so it cannot be resolved to a single citation; treated as unverifiable rather than disputed given the numbers are in the same range across sources.

The cited evidence supports part of the claim but not all of it.

1. #1[partially supported][awaiting moderator]in section: Protocol Overview

   “The protocol's OFT standard powers USDT0, an omnichain version of Tether's USDT launched in January 2025, which processed over $70 billion in cross-chain transfers within its first year across 23 networks.”

   reviewerUSDT0 processed over $70 billion in cross-chain transfers across 23 networks, cited to a Block article about a $50 billion milestoneThe $70 billion figure is independently correct (confirmed by the tether.io press release also cited on this page), but the specific source cited for this sentence in the Protocol Overview section only supports a $50 billion / 15-network figure from an earlier date. The citation should point to the tether.io announcement instead.
   citedwww.theblock.co/post/380434/tether-pegge…lative-transfers

The cited evidence supports the claim as written.

1. #8[confirmed][no action needed]in section: Protocol Overview

   “As of April 2026, LayerZero has processed over 200 million cross-chain messages and more than 50 DVN operators participate in the network, including LayerZero Labs, Google Cloud, Polyhedra Network, Nethermind, and Animoca.”

   reviewerLayerZero processed over 200 million cross-chain messages and has more than 50 DVN operators including LayerZero Labs, Google Cloud, Polyhedra Network, Nethermind, and Animoca as of April 2026Figures and named DVN operators are corroborated by independent sources.
   citeddocs.layerzero.network/v2/concepts/proto…rotocol-overview
2. #9[confirmed][no action needed]in section: April 2026 KelpDAO Bridge Exploit ($292M)

   “On April 18, 2026, KelpDAO's rsETH bridge, powered by LayerZero's OFT infrastructure, was exploited for approximately 116,500 rsETH worth roughly $292 million — the largest DeFi hack of 2026. The attack window ran from 10:20 a.m. to 11:40 a.m. Pacific Time.”

   reviewerKelpDAO's rsETH bridge was exploited on April 18, 2026 for approximately 116,500 rsETH (~$292M), attributed to DPRK's TraderTraitor/Lazarus Group, with attack window 10:20-11:40 a.m. Pacific TimeFully corroborated by the primary incident report and contemporaneous reporting.
   citedlayerzero.network/publications/kelpdao-i…ident-report.pdfwww.coindesk.com/tech/2026/04/20/layerze…-korea-s-lazarus
3. #10[confirmed][no action needed]in section: April 2026 KelpDAO Bridge Exploit ($292M)

   “According to LayerZero's incident report published May 18, 2026, the attack chain began on March 6, 2026, when a LayerZero Labs developer was socially engineered to clone a malicious GitHub repository, which installed macOS malware providing remote access to the developer's machine.”

   reviewerThe attack chain began March 6, 2026 via social engineering of a LayerZero Labs developer, malware install, session-key harvesting, dormancy of approximately six weeks, then compromise of op-geth on two Kubernetes clusters and a DoS against an external RPC providerDirectly verified against the primary incident report PDF; all technical details (malware, dormancy period, GKE clusters, DoS) match.
   citedlayerzero.network/publications/kelpdao-i…ident-report.pdf
4. #11[confirmed][no action needed]in section: April 2026 KelpDAO Bridge Exploit ($292M)

   “Because KelpDAO's rsETH bridge was configured in a 1-of-1 DVN setup, with LayerZero Labs' DVN as the sole verifier, the single compromised signer set was sufficient to authorize arbitrary cross-chain messages. An attempted secondary theft of 40,000 rsETH (~$95 million) was blocked through rapid contract pausing.”

   reviewerKelpDAO's bridge used a 1-of-1 DVN configuration, previously 2-of-2, downgraded before the exploit, sole verifier sufficient to authorize the attack; a secondary theft attempt of 40,000 rsETH was blockedThe 1-of-1/2-of-2 downgrade is confirmed directly in the primary incident report; the secondary blocked theft is confirmed via independent security reporting though not found verbatim in the excerpted incident report text.
   citedlayerzero.network/publications/kelpdao-i…ident-report.pdf
5. #12[confirmed][no action needed]in section: 1-of-1 DVN Configuration: Root Cause and Responsibility Dispute

   “The company stated: 'We made a mistake by allowing our DVN to act as a 1/1 DVN for high-value transactions. We didn't police what our DVN was securing, which created a risk we simply didn't see. We own that.'”

   reviewerLayerZero's 'An Overdue Apology' statement of May 9, 2026 admits the DVN mistake, discloses a prior multisig signer's personal trade, and outlines OneSig, Console, and the 3-of-5 to 7-of-10 multisig threshold changeVerified word-for-word against the primary source.
   citedlayerzero.network/blog/an-overdue-apology
6. #13[confirmed][no action needed]in section: Security Changes and Corrective Actions

   “On the DVN configuration policy: LayerZero's DVN will no longer service applications running 1-of-1 DVN configurations. All default pathway configurations are being migrated to 5-of-5 where possible, and no less than 3-of-3 on chains where only three DVNs are available.”

   reviewerLayerZero's DVN policy change: no longer services 1-of-1 configurations, migrating defaults to 5-of-5 (min 3-of-3 on 3-DVN chains)Confirmed against primary source.
   citedlayerzero.network/blog/an-overdue-apology
7. #14[confirmed][no action needed]in section: Client Exodus and Competitive Fallout

   “Total reported migrations to Chainlink CCIP following the incident exceeded $4 billion across KelpDAO, Solv Protocol, Re.xyz, Kraken, and Lombard, per reporting by Crypto.news.”

   reviewerThe client exodus totaled over $4 billion migrating to Chainlink CCIP, including KelpDAO, Solv Protocol ($700M), Re.xyz, Kraken (kBTC), and LombardConfirmed against the cited source directly.
   citedcrypto.news/chainlink-ccip-draws-4b-from…ayerzero-exodus/
8. #15[confirmed][no action needed]in section: Client Exodus and Competitive Fallout

   “KelpDAO was among the first to announce a migration, shifting its rsETH bridge to Chainlink CCIP on or around May 5, 2026.”

   reviewerKelpDAO announced migration to Chainlink CCIP on or around May 5, 2026Confirmed by independent reporting.
9. #16[confirmed][no action needed]in section: ZRO Token Launch and Airdrop Controversy (2024)

   “According to LayerZero, 803,273 wallets (59% of potential recipients) were removed before distribution.”

   reviewerZRO airdrop: 8.5% of 1B supply distributed day one to ~1.28M wallets; 803,273 wallets (59%) removed as suspected Sybils via self-reporting for 15% allocationConfirmed by independent reporting on the airdrop mechanics.
   citedunchainedcrypto.com/layerzero-fought-the…id-the-team-win/
10. #17[confirmed][no action needed]in section: Protocol Overview

    “Institutional backers for Zero include Citadel Securities, DTCC, Intercontinental Exchange, Google Cloud, ARK Invest, and Tether.”

    reviewerThe Zero Layer-1 blockchain was announced in February 2026 with institutional backers Citadel Securities, DTCC, ICE, Google Cloud, ARK Invest, and TetherConfirmed by independent reporting matching the press release.
    citedwww.businesswire.com/news/home/202602104…tadel-Securities
11. #18[confirmed][no action needed]in section: April 2026 KelpDAO Bridge Exploit ($292M)

    “This represented the second major DeFi attack by the same unit within 18 days of a broader campaign totaling over $575 million in losses.”

    reviewerThe same North Korean unit (TraderTraitor) carried out a second major DeFi attack within 18 days of a broader campaign totaling over $575 million in lossesConfirmed by independent reporting, though no specific citation appears attached to this sentence within the section's source list.