Back
LayerZero says large wallet transfer was routine rebalancing, not a hack

LayerZero says large wallet transfer was routine rebalancing, not a hack

The protocol said no user funds were affected after on-chain analyst Specter had flagged an apparent compromise involving roughly $2.4 million moved across multiple blockchains.

Fact Check
The claim faithfully represents what Specter (SpecterAnalyst) stated in the primary X post: a LayerZero Executor wallet compromise with $2.1M lost across chains, funds bridged to Ethereum via Stargate and Relay, and current holdings of 955 ETH and $322K USDC. All figures match exactly. Multiple independent aggregators (PANews, BlockBeats, Coinminutes) corroborate identical details, and the incident was independently flagged by CyversAlerts. The claim accurately reports the on-chain analyst's finding. It remains an allegation/on-chain analysis rather than an official LayerZero confirmation, so a small residual uncertainty applies to the underlying facts.
Summary

LayerZero said a large transfer from its protocol operations wallet was a normal operational fund rebalancing rather than a hack, adding that no user funds were exposed to risk. The statement, posted on X on July 15, came after on-chain analyst Specter said there were signs the project's Executor wallet had been compromised and that about $2.4 million of digital assets had apparently been drained across multiple blockchains. The episode highlights how wallet movements tied to cross-chain infrastructure can quickly trigger exploit concerns before a project clarifies whether transfers were internal operations or unauthorized activity.

Terms & Concepts
  • cross-chain: Describing activity or transfers that move assets between different blockchains.