LayerZero Dispute Centers on Default Library Security Risk to OFT Tokens

Researchers said a default library contract could affect more than $3 billion in LayerZero OFT (Omnichain Fungible Token) assets, while CEO Bryan Pellegrino said one team member who tested PEPE was removed.

PEPE

Summary

LayerZero Labs is facing a security dispute tied to a default library contract that researchers said could put more than $3 billion in LZ OFT (Omnichain Fungible Token) at risk. Researcher Banteg said $178 million remains exposed across projects still using the default library, indicating that some integrations may not yet have migrated away from the vulnerable setup. Bryan Pellegrino, the company’s CEO, said one team member tested PEPE and was removed, adding a personnel element to the broader controversy. The issue highlights how shared smart contract (self-executing blockchain code) components can create ecosystem-wide risk when multiple projects rely on the same default infrastructure.

Terms & Concepts
  • OFT (Omnichain Fungible Token): A token standard designed to move fungible assets across multiple blockchains through LayerZero’s cross-chain messaging system.
  • smart contract: Self-executing blockchain code that carries out predefined actions when specified conditions are met.
  • default library contract: A shared code component used by default in deployments; if flawed, it can affect many connected applications at once.