The crypto community spent several hours in suspense discussing the alleged hack of LayerZero protocol wallets. However, as detailed analysis showed, the alarm turned out to be false. The movement of $2.4 million in funds, which many mistook for a hacker attack, was actually a standard internal asset rebalancing operation.
The first signal came from the security service PeckShield, which published data suggesting that the Executor wallets of the LayerZero protocol appeared compromised. Cryptocurrency worth $2.4 million was allegedly withdrawn from several networks, including BNB Chain, Base, Arbitrum, Avalanche, Optimism, Mantle, Plasma, and Ethereum. According to initial estimates, the attacker consolidated the funds on the Ethereum network, exchanging most of them for 956 ETH (about $1.79 million) and $322,000 in USDC.
How the Panic Started
Other observers joined PeckShield. WuBlockchain, citing Specter, reported losses of about $2.1 million and the transfer of funds through Stargate and Relay services. Analyst Zakaria Sharif also suggested the Executor wallet was compromised, estimating potential damage at roughly $2.1 million. It seemed we were dealing with yet another high-profile attack on an infrastructure protocol.
Why the Alarm Was False
However, the LayerZero team quickly refuted this version. In an official statement, the protocol emphasized that the funds were withdrawn from internal wallets as part of standard asset operations, and "nothing is at risk." Project co-founder Bryan Pellegrino also noted that he did not understand how or why this story emerged, as it was merely "a routine consolidation of assets."
Independent analysts confirmed this position. Expert Crypto Patel pointed out that reports of a "$2.4 million hack" were a false alarm, and the transfers were part of routine internal rebalancing. The Verdict service noted that the alleged hack caused the market to panic for about four hours: "956 ETH moved, headlines appeared, and some protocols paused operations."
My view on the situation: This incident is a vivid example of how quickly and thoughtlessly the crypto market reacts to unverified signals. The lack of proper data verification and a tendency toward sensationalism lead to unjustified panic, which can cause more harm than an actual attack. A lesson for all participants: always verify on-chain fund movements before raising the alarm.