# LayerZero

Markdown version of https://l2beat.com/interop/protocols/layerzero

## Summary

- Last 24h volume: $308.20 M
- Last 24h transfer count: 6.38 K
- Last 24h top path: Arbitrum One ↔ Ethereum ($113.26 M)
- Last 24h avg. transfer time: 11m 28s
- Last 24h avg. transfer value: $51.06 K
- Last 24h tokens by volume: [USDT](https://l2beat.com/interop/tokens/xxeNQv/tether/usdt) ($108.50 M), [PYUSD](https://l2beat.com/interop/tokens/qUFouU/pyusd) ($89.81 M), [USDe](https://l2beat.com/interop/tokens/tmyD4t/ethena/usde) ($65.17 M), and 203 more
- Last 24h top token: [USDT](https://l2beat.com/interop/tokens/xxeNQv/tether/usdt) ($108.50 M volume, 1.85 K transfers)
- Last 24h transfer size: Under $100: 1.66 K transfers, $100-$1K: 2.20 K transfers, $1K-$10K: 1.14 K transfers, $10K-$100K: 659 transfers, Over $100K: 367 transfers (min under $0.01, average $51.06 K, max $18.98 M)
- Last 24h transfer type distribution: Lock & Mint: $173.41 M, Burn & Mint: $134.65 M, Non-minting: $136.37 K

### About

LayerZero OFT (omnichain fungible token) is a multichain token framework built on the modular, highly customizable LayerZero messaging protocol. While it theoretically supports any form of validation, ~100% of messages are validated by multisig-like smart contracts called DVNs ("Decentralized" Validator Networks). The protocol supports a vast set of EVM and non-EVM destinations.

## Volume and flows

### Top chains by volume (last 24h)

A transfer counts toward the volume of both its source and its destination chain, so the chain volumes add up to more than the total volume.

- Ethereum: $279.39 M (3.07 K transfers)
- Arbitrum One: $130.61 M (1.63 K transfers)
- Plasma: $45.14 M (176 transfers)
- and 20 more

### Top routes by volume (last 24h)

- Arbitrum One → Ethereum: $100.67 M
- Solana → Ethereum: $25.64 M
- Plasma → Ethereum: $22.07 M
- Ethereum → Tron: $18.76 M
- Monad → Ethereum: $17.33 M
- Ethereum → Plasma: $16.99 M
- Ethereum → Arbitrum One: $12.59 M
- Ethereum → Solana: $7.87 M
- Robinhood Chain → Ethereum: $7.72 M
- Tron → Ethereum: $7.69 M

The flows between chains are an interactive graph on [the HTML page](https://l2beat.com/interop/protocols/layerzero#interop-volume).

## Description

LayerZero OFT (omnichain fungible token) is a multichain token framework built on the modular, highly customizable LayerZero messaging protocol. While it theoretically supports any form of validation, ~100% of messages are validated by multisig-like smart contracts called DVNs ("Decentralized" Validator Networks). The protocol supports a vast set of EVM and non-EVM destinations.

### Architecture
LayerZero deploys a single `Endpoint` contract on each supported chain. This contract serves as the chain-central registry for omnichain apps (*OApp*s) and their *owners* and *delegates*. An *Oapp* is a smart contract that interacts with the LayerZero protocol through a standardized messaging interface. The most popular OApp flavor is the omnichain fungible token (*OFT*) standard, which enables the transport of tokens across LayerZero-supported chains. Token owners can deploy *OFT Adapter* smart contracts (*OApps* themselves) that connect traditional tokens to the LayerZero protocol. New tokens can be directly bound to LayerZero by deploying them as a native *OFT* smart contract, which is automatically an OApp on LayerZero.

### Crosschain oracle and validation
The modular LayerZero messaging protocol supports any smart contract logic as its validation mechanism. In practice and by default, multisignature wallets and EOAs validate and deliver crosschain messages, called *packets* in LZ terms. *OApp owner* addresses or their onchain *delegates* can override the default security config for their OApp in each local `Endpoint` contract. Each library or setting that is not explicitly configured falls back to the default config. Security configs consist of a validation library (smart contract) and its various settings (like the actual validating multisigs and their threshold) and importantly can be set **on each chain separately** and then **for each *peer* chain from/to that chain**. For example, a single OFT that is live on 20 chains can have 20x20=400 security configs, counting incoming configs only. A misconfiguration or exploit in any single one of those 400 validation configs can compromise the example OFT.

### Upgradeability
Core protocol contract code forms a framework that points at security-critical contracts. Although the core framework contract code is immutable, the security config and its implementation contracts can be changed by permissioned actors like the LayerZero team and the *OApp* owners, which effectively results in system upgrades. Application-level contracts like OApps have custom upgradeability.

### Monitoring
LayerZero provides a [block explorer](https://layerzeroscan.com/) which is mostly intended for users and researchers tracking crosschain transactions and for aggregate metrics. There currently is no security or monitoring related tooling for OApp owners like global OFT accounting or global security config tracking.

## Top tokens by volume

The interactive tokens table is shown on [the HTML page](https://l2beat.com/interop/protocols/layerzero#interop-tokens).

## Transfers

The interactive transfers table is shown on [the HTML page](https://l2beat.com/interop/protocols/layerzero#interop-transfers).

## Updates

Each date links the update on the HTML page, which also shows its contract diffs.

### [2026-10-12 07:19 UTC](https://l2beat.com/interop/protocols/layerzero?update=88a5944c) (high severity, 17 changes)

The Ethereum executor upgraded to an unverified implementation.

[Executor diff](https://disco.l2beat.com/diff/eth:0xfE9AB78eD4f9f3DbB168d9f5E5213d78605C9805/eth:0x1Ed8E51E8AB2A00B2805aEcf2C6aC0BB6521eaE0).

### [2026-08-10 09:01 UTC](https://l2beat.com/interop/protocols/layerzero?update=13612088) (4 changes)

Multisig member change.

### [2026-07-23 13:55 UTC](https://l2beat.com/interop/protocols/layerzero?update=6314d6c3) (1 change)

One Safe signer was rotated.

### [2026-07-17 07:48 UTC](https://l2beat.com/interop/protocols/layerzero?update=9306b56d) (1 change)

Single signer change.

### [2026-06-16 09:59 UTC](https://l2beat.com/interop/protocols/layerzero?update=cc504a7b) (1 change)

Unichain peer blocked in ethereum rsETH OApp.

### [2026-04-27 10:31 UTC](https://l2beat.com/interop/protocols/layerzero?update=4b6f822a) (4 changes)

tidy up config after ai changes and make it FE-ready.

### [2026-04-27 10:31 UTC](https://l2beat.com/interop/protocols/layerzero?update=90949d16) (10 changes)

initial ai-disco with skill after revive.

## Permissions

### Ethereum

#### Actors

##### LayerZero Multisig

Addresses: [0xBe010A7e3686FdF65E93344ab664D065A0B02478](https://etherscan.io/address/0xBe010A7e3686FdF65E93344ab664D065A0B02478)

A Multisig with 5/7 threshold.
Custom multisignature contract allowing offchain signing and execution on multiple target chains.
- Can interact with EndpointV2
  - configure the default send/receive libraries used for verification, affecting all OApps that have not set up a custom security config
- Can interact with ReadLib1002
  - configure the settings of this library, affecting all OApps that have not set up a custom security config
- Can interact with SendUln302
  - configure the settings of this library, affecting all OApps that have not set up a custom security config
- Can interact with ReceiveUln302
  - configure the settings of this library, affecting all OApps that have not set up a custom security config

Participants (7): [0x0cb72C1F6a36c225A7E2B21712E8853A4A1acc47](https://etherscan.io/address/0x0cb72C1F6a36c225A7E2B21712E8853A4A1acc47), [0x5bC6AA6ad117A8B50ABf9E1658971f5DA1968c5c](https://etherscan.io/address/0x5bC6AA6ad117A8B50ABf9E1658971f5DA1968c5c), [0x73E9c017Ad37e2113e709D8070Cc9E1b28180e1e](https://etherscan.io/address/0x73E9c017Ad37e2113e709D8070Cc9E1b28180e1e), [0x771dcAcB96024d1e55Fd21Fe8a8187AA7EC9e77e](https://etherscan.io/address/0x771dcAcB96024d1e55Fd21Fe8a8187AA7EC9e77e), [0xe67DB04d7eFF4e9ec282eD929632D4FF058112d7](https://etherscan.io/address/0xe67DB04d7eFF4e9ec282eD929632D4FF058112d7), [0xdFE4027209C795B84d39FfBfF86bf73572571BAd](https://etherscan.io/address/0xdFE4027209C795B84d39FfBfF86bf73572571BAd), [0x2be094F1C9AaF76aD3A789EA4f047BBE7D1DB552](https://etherscan.io/address/0x2be094F1C9AaF76aD3A789EA4f047BBE7D1DB552)

##### GnosisSafe

Addresses: [0xCbcdd778AA25476F203814214dD3E9b9c46829A1](https://etherscan.io/address/0xCbcdd778AA25476F203814214dD3E9b9c46829A1)

A Multisig with 3/6 threshold.
- Can interact with EndpointV2
  - manage all settings of the LZ crosschain security stack for the respective OApp: change libraries, DVN configs etc
- Can interact with RsETHOFTAdapter
  - can configure the OFT adapter, including LayerZero peer and delegate settings

Participants (6): [0xFCc1C98F887C93C38Deb5e38A6Fb820AD3fB9DFD](https://etherscan.io/address/0xFCc1C98F887C93C38Deb5e38A6Fb820AD3fB9DFD), [0x51C59785639CCa31c09D0833749e76A5D945C9F3](https://etherscan.io/address/0x51C59785639CCa31c09D0833749e76A5D945C9F3), [0x601767c4ba4134cc2E906ea7cf25EaB845152A7C](https://etherscan.io/address/0x601767c4ba4134cc2E906ea7cf25EaB845152A7C), [0xb859DD2Cb50F19a53Ad25b279750ba5DEC76D306](https://etherscan.io/address/0xb859DD2Cb50F19a53Ad25b279750ba5DEC76D306), [0x7AAd74b7f0d60D5867B59dbD377a71783425af47](https://etherscan.io/address/0x7AAd74b7f0d60D5867B59dbD377a71783425af47), [0xa85B57bD7433dCC4679d638b87d80F155A689Fc1](https://etherscan.io/address/0xa85B57bD7433dCC4679d638b87d80F155A689Fc1)

##### Horizen DVN

Addresses: [0x380275805876Ff19055EA900CDb2B46a94ecF20D](https://etherscan.io/address/0x380275805876Ff19055EA900CDb2B46a94ecF20D)

Defines the logic that validates LayerZero Packets for this DVN.
- Can interact with SendUln302
  - receive validation fees for rsETH OFT messages sent to Unichain through LayerZero (the incoming vaidating DVN is defined on Unichain)
- Can interact with ReceiveUln302
  - verify rsETH OFT messages sent from Unichain through LayerZero

##### LayerZero DVN

Addresses: [0x589dEDbD617e0CBcB916A9223F4d1300c294236b](https://etherscan.io/address/0x589dEDbD617e0CBcB916A9223F4d1300c294236b)

Defines the logic that validates LayerZero Packets for this DVN.
- Can interact with SendUln302
  - receive validation fees for rsETH OFT messages sent to Unichain through LayerZero (the incoming vaidating DVN is defined on Unichain)
- Can interact with ReceiveUln302
  - verify rsETH OFT messages sent from Unichain through LayerZero

##### Canary DVN

Addresses: [0xa4fE5A5B9A846458a70Cd0748228aED3bF65c2cd](https://etherscan.io/address/0xa4fE5A5B9A846458a70Cd0748228aED3bF65c2cd)

Defines the logic that validates LayerZero Packets for this DVN.
- Can interact with SendUln302
  - receive validation fees for rsETH OFT messages sent to Unichain through LayerZero (the incoming vaidating DVN is defined on Unichain)
- Can interact with ReceiveUln302
  - verify rsETH OFT messages sent from Unichain through LayerZero

##### Netherming DVN

Addresses: [0xa59BA433ac34D2927232918Ef5B2eaAfcF130BA5](https://etherscan.io/address/0xa59BA433ac34D2927232918Ef5B2eaAfcF130BA5)

Defines the logic that validates LayerZero Packets for this DVN.
- Can interact with SendUln302
  - receive validation fees for rsETH OFT messages sent to Unichain through LayerZero (the incoming vaidating DVN is defined on Unichain)
- Can interact with ReceiveUln302
  - verify rsETH OFT messages sent from Unichain through LayerZero

##### Executor

Addresses: [0x173272739Bd7Aa6e4e214714048a9fE699453059](https://etherscan.io/address/0x173272739Bd7Aa6e4e214714048a9fE699453059) (unverified)

Upgradeable contract referenced as an executor by LayerZero message libraries. Its current implementation is unverified, so execution and fee handling cannot be checked against source.
- Can interact with SendUln302
  - receive execution fees for rsETH OFT messages sent to Unichain through LayerZero

##### EOA 1

Addresses: [0x76F6d257CEB5736CbcAAb5c48E4225a45F74d6e5](https://etherscan.io/address/0x76F6d257CEB5736CbcAAb5c48E4225a45F74d6e5)

- Can upgrade **with no delay**
  - Executor [via: ProxyAdmin]

## Smart contracts

### Ethereum

#### EndpointV2

Addresses: [0x1a44076050125825900e736c501f859c50fE728c](https://etherscan.io/address/0x1a44076050125825900e736c501f859c50fE728c#code)

Part of the LayerZero messaging protocol. OApp owners or their delegates can configure custom verification- (message libraries) and execution settings here.
- Roles:
  - **owner**: LayerZero Multisig
  - **rsETHAdapterDelegate**: GnosisSafe

#### ReceiveUln302

Addresses: [0xc02Ab410f0734EFa3F14628780e6e695156024C2](https://etherscan.io/address/0xc02Ab410f0734EFa3F14628780e6e695156024C2#code)

LayerZero-deployed receive library, defining the validation of received messages.
- Roles:
  - **getUlnConfig**: Canary DVN, Horizen DVN, LayerZero DVN, Netherming DVN
  - **owner**: LayerZero Multisig

#### RsETHOFTAdapter

Addresses: [0x85d456B2DfF1fd8245387C0BfB64Dfb700e98Ef3](https://etherscan.io/address/0x85d456B2DfF1fd8245387C0BfB64Dfb700e98Ef3#code)

An OApp in the LayerZero protocol that adapts an existing ERC20 token into the OFT standard. Its owner can configure peers and LayerZero security settings for connected routes.
- Roles:
  - **owner**: GnosisSafe

#### BlockedMessageLib

Addresses: [0x1ccBf0db9C192d969de57E25B3fF09A25bb1D862](https://etherscan.io/address/0x1ccBf0db9C192d969de57E25B3fF09A25bb1D862#code)

Simple LayerZero library that blocks all messages if selected.

#### ReadLib1002

Addresses: [0x74F55Bc2a79A27A0bF1D1A35dB5d0Fc36b9FDB9D](https://etherscan.io/address/0x74F55Bc2a79A27A0bF1D1A35dB5d0Fc36b9FDB9D#code)

LayerZero library used to read state from remote blockchains.
- Roles:
  - **owner**: LayerZero Multisig

#### ProxyAdmin

Addresses: [0xa36797bA947b378AefE5f726Cd87766CD3c25Ee3](https://etherscan.io/address/0xa36797bA947b378AefE5f726Cd87766CD3c25Ee3#code)

- Roles:
  - **owner**: EOA 1

#### SendUln302

Addresses: [0xbB2Ea70C9E858123480642Cf96acbcCE1372dCe1](https://etherscan.io/address/0xbB2Ea70C9E858123480642Cf96acbcCE1372dCe1#code)

Send Library used by LayerZero, defining the protocol/execution of sent messages.
- Roles:
  - **getExecutorConfig**: Executor
  - **getUlnConfig**: Canary DVN, Horizen DVN, LayerZero DVN, Netherming DVN
  - **owner**: LayerZero Multisig

The current deployment carries some associated risks:

- Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).