The short answerLayerZero connects more chains than anything else and lets each application choose its own verification setup, which is strong when configured well and weak when configured cheaply. The core protocol has not been compromised; several applications built on it have been.
Best forBroadest omnichain messaging coverage
Trust assumptionsweight 30%
6.5avg 7.2
Exploit historyweight 25%
8.5avg 8.8
Settlement speedweight 15%
8.5avg 8.3
Chain coverageweight 15%
10.0avg 8.1
Costweight 15%
7.5avg 8.2
this service category average across 15Score = Σ mark × weight. Recommendable to most readers, with stated caveats. Methodology.
| Criterion | Mark | What we found | Source | Checked |
|---|
| Trust assumptions | 6.5 | not sourced yet | not sourced yet | — |
| Exploit history | 8.5 | not sourced yet | not sourced yet | — |
| Settlement speed | 8.5 | not sourced yet | not sourced yet | — |
| Chain coverage | 10.0 | not sourced yet | not sourced yet | — |
| Cost | 7.5 | not sourced yet | not sourced yet | — |
What we liked, and what fell short
Liked- Supports over a hundred chains, far beyond any competitor
- Configurable verification lets applications choose their own security level
- No compromise of the core protocol to date
Fell short- Security depends on each application's DVN configuration, and defaults have been criticised
- Applications built on it have been exploited even when the messaging layer held
Why the marks landed where they did
LayerZero is messaging infrastructure rather than a bridge per se: applications use it to send arbitrary messages between chains, and token bridges are one use case among many. Its coverage — well over a hundred chains — is unmatched.
The configurable security model
In v2, each application chooses its Decentralised Verifier Networks: which parties must independently confirm a message before it is accepted. An application can require several reputable DVNs, which is a strong setup, or it can accept the cheapest default, which is not. That choice is invisible to end users, who assume the protocol's brand implies a security level it does not guarantee.
What has actually gone wrong
The core messaging layer has not been compromised. Applications built on it have been exploited, usually through their own contract logic or through inadequate verifier configuration. From a user's perspective the distinction is academic — funds are gone either way — which is why understanding the specific application's configuration matters more than the underlying protocol's reputation.
Costs
Set by each application on top of gas. Bridging costs therefore vary substantially depending on which product you use, not on LayerZero itself.
Who should use it
Users of specific applications built on it, having checked how that application configures verification where possible. Builders wanting the broadest chain reach available.
FAQ
What is a DVN?+
A Decentralised Verifier Network — an independent party that confirms a cross-chain message. Applications choose how many and which ones must agree before a message is accepted.
Has LayerZero been hacked?+
The core messaging protocol has not been compromised. Applications built on it have been exploited through their own logic or weak verifier configurations.
How many chains does LayerZero support?+
More than a hundred, which is far beyond any competitor.
Is LayerZero safe?+
It depends on the application. Well-configured integrations requiring multiple independent verifiers are strong; cheap default configurations are much weaker.
