A wallet used to execute transactions on the LayerZero (ZRO) protocol has been compromised, with roughly $2.1 million in assets drained across multiple blockchains.
On-chain analyst Specter flagged the breach on X on July 15, noting that the LayerZero Executor wallet appears to have been taken over. The stolen funds – a mix of tokens – were then moved to the Ethereum network via Stargate and Relay, two cross-chain messaging and bridging protocols.
LayerZero’s Executor is a critical piece of infrastructure. It processes and finalizes cross-chain message deliveries, essentially acting as the settlement layer for bridging activity. A compromise at this level raises questions about the security of the protocol’s message-relaying mechanism.
The attacker consolidated the loot onto Ethereum, suggesting a likely plan to cash out through centralized exchanges or decentralized liquidity pools. Stargate, a cross-chain bridge built on top of LayerZero, and Relay, a similar relay service, were used as the exit route – an ironic twist given both rely on LayerZero for interoperability.
The LayerZero team has acknowledged the incident, saying they suspect a hack but have not yet released a detailed post-mortem. No official statement has been published as of press time.
The event is a fresh reminder that even infrastructure wallets carrying no user funds can become attack vectors if private keys are exposed. For traders and liquidity providers who rely on LayerZero-powered bridges, the immediate concern is whether the attacker can manipulate pending messages or delay settlements. The team has not confirmed any service disruption, but the bearish sentiment around ZRO and ETH has already tightened.
What to watch next: LayerZero’s official response – whether they offer a timeline for securing the Executor wallet and whether any user funds beyond the stolen $2.1 million are at risk. Until then, cross-chain flows through LayerZero-linked bridges will face added scrutiny.
LayerZero’s transaction wallet hacked, $2.1M stolen across blockchains, raising security concerns
A key wallet used by LayerZero’s protocol to process cross-chain transactions was hacked, resulting in $2.1 million stolen from multiple blockchain networks. This affects users relying on LayerZero for moving assets between blockchains and highlights risks in cross-chain transaction security.