LayerZero
ZRO
Evaluation Score
Overall rating on a scale of 0-10
Dimension Breakdown
AI Analysis
Comprehensive evaluation of the token
LayerZero (ZRO) is an established cross-chain interoperability protocol with strong developer momentum (score 7.5), an ambitious technical roadmap including the Zero L1 mainnet launch, and solid backing from tier-1 investors. However, the project's profile is severely compromised by heavy insider token allocations (57.7% on vesting schedules creating persistent unlock overhang) and, most critically, a catastrophic security incident in April 2026. Specifically, as documented in the security review: 'The breach began on March 6, 2026, when an attacker socially engineered a LayerZero Labs developer to harvest session keys and pivot into the system' leading to the KelpDAO rsETH exploit where 'approximately $290 million [was] drained' due to a vulnerable 1-of-1 DVN configuration on LayerZero infrastructure. This recent, severe exploit ($290M lost plus up to $230M in Aave bad debt and widespread contagion) constitutes a qualifying red-flag event within the past 24 months, capping the overall score at 5.0 (down from its uncapped weighted average of 5.25).
Development Activity
Code updates and developer engagement
Community Support
Social media presence and community engagement
Tokenomics
Supply, distribution, and utility
Market & Use Case
Value proposition and competitive landscape
Team & Governance
Team background and project governance
Security & Audits
Security history and audit status
About LayerZero (ZRO)
LayerZero (ZRO) is the native token of LayerZero, an omnichain interoperability protocol developed by LayerZero Labs and supported by the LayerZero Foundation. Led by co-founders Bryan Pellegrino and Ryan Zarick, the protocol provides cross-chain messaging infrastructure across more than 70 blockchains, including Ethereum, Base, Polygon, BNB Smart Chain, Avalanche, Arbitrum, and Optimism. The ZRO token functions primarily as a governance mechanism for protocol parameters—including fee-switch activations—and is planned to serve as the native gas token for the upcoming Zero Layer 1 blockchain targeted for launch in Fall 2026.
The token operates with a fixed maximum supply of 1 billion ZRO. Approximately 35% of the total supply is in circulation, with 57.7% allocated to insiders subject to a three-year vesting schedule. Protocol development includes infrastructure codebases such as ZeroOS and akita, alongside governance-led initiatives such as a $110 million STG/ZRO token buyback program.
In April 2026, LayerZero's infrastructure was compromised in the KelpDAO rsETH exploit, resulting in approximately $290 million being drained. The breach originated on March 6, 2026, when an attacker socially engineered a LayerZero Labs developer to obtain session keys, later exploiting a sub-RPC on a Decentralized Verifier Network (DVN) operated in a single-validator (1-of-1) configuration. The exploit caused broad contagion across decentralized finance protocols, generating an estimated $123.7 million to $230.1 million in bad debt on Aave, prompting emergency actions including the Arbitrum Security Council freezing 30,766 ETH, and contributing to an estimated $15 billion drop in total value locked across the broader ecosystem. Following the exploit, LayerZero initiated security remediations to transition to a mandatory multi-validator DVN standard.