Wyoming moves FRNT to Chainlink after security review

The Wyoming Stable Token Commission said on Aug. 18 that it had completed the migration of its Frontier Stable Token from LayerZero to Chainlink’s Cross-Chain Interoperability Protocol.

Chainlink CCIP will now provide FRNT’s exclusive cross-chain infrastructure under a multiyear contract. The commission will fully deprecate the LayerZero implementation, according to an official release.

The decision follows a state security review that examined disclosure practices and operational controls. Wyoming said FRNT holders were not required to take action during the transition.

Wyoming cited security and disclosure concerns

Commission Executive Director Anthony Apollo said the review identified concerns about LayerZero’s disclosure practices and operational security.

“The Commission proactively conducted a security review and identified concerns regarding LayerZero’s disclosure practices and operational security,” Apollo said. 

He added that CCIP was the only evaluated system meeting the commission’s security and reliability requirements “across the board.”

The commission cited CCIP’s monitoring systems, built-in risk controls and redundant validation. Chainlink says every CCIP transaction receives validation from at least 16 independent node operators. It also lists SOC 2 Type 2 certification among its institutional controls.

Those descriptions come from Chainlink and the commission. They do not establish that cross-chain transfers are free from technical or operational risks.

FRNT will continue operating across eight blockchains

FRNT is available on Arbitrum, Avalanche, Base, Ethereum, Hedera, Optimism, Polygon and Solana. The state initially deployed it through LayerZero’s Omnichain Fungible Token standard before replacing the underlying interoperability system.

Wyoming’s website describes FRNT as the first fully reserved stable token issued by a U.S. public entity. Its reserves consist of cash and short-term U.S. Treasury securities, with reserve income supporting the state’s School Foundation Program.

As crypto.news previously reported, Wyoming initially launched the token across seven networks before adding Hedera. Distribution partners have included Kraken and Rain’s Visa-linked card service.

FRNT’s capitalization remains below $1 million. The migration therefore concerns a relatively small asset, despite its unusual status as public-sector digital dollar infrastructure.

The move follows scrutiny of LayerZero security

Wyoming’s announcement came four months after attackers stole approximately 116,500 rsETH from Kelp DAO’s LayerZero-powered bridge. The tokens were worth about $292 million when the April attack occurred.

LayerZero attributed that incident to compromised RPC infrastructure and Kelp DAO’s single-verifier configuration. Kelp disputed parts of that account, including whether LayerZero had previously accepted the arrangement.

As crypto.news reported in its account of the security dispute, LayerZero later stopped supporting applications using single-verifier configurations. There is no evidence that Wyoming’s former FRNT deployment used the same structure.

LayerZero’s January case study said Wyoming controlled its verification and compliance functions through its own decentralized verifier network. LayerZero also told CoinDesk that FRNT holders were unaffected by the migration.

Announced migrations now cover nearly $15 billion

Kelp DAO, Kraken, Solv Protocol, Re and other projects announced moves to CCIP after reviewing their cross-chain systems. BitGo’s decision to migrate wrapped Bitcoin added more than $7 billion to the total.

As previously reported, BitGo’s move pushed the combined value near $15 billion. That figure measures assets covered by announced infrastructure changes. It does not represent money withdrawn from LayerZero contracts on a single date.

LayerZero said it respected Wyoming’s decision and was helping ensure a smooth transition. A spokesperson said the company had “hardened” its security approach in recent months. The statement did not address the commission’s specific disclosure concerns.

Wyoming has completed the technical migration, but the commission has not published the full security review or detailed deprecation schedule. Future notices are expected to clarify how legacy contracts and cross-chain routes will be retired.