Skip to content
Reviews

Cross-Chain Bridges reviewed

Compare cross-chain bridges across security audits, transaction speed, fees, chain coverage and historical reliability, using the same transparent scoring methodology.

Bridges we have reviewed

Bridge buyer's guide

By Matilde Ferreira · Updated

What is a cross-chain bridge, and who are you trusting?

A cross-chain bridge moves tokens from one blockchain to another, but nothing actually travels. The bridge locks or burns your tokens on the source chain and releases or mints an equivalent on the destination, or a third party pays you from its own funds and is repaid later. Which of those happens decides who you are trusting with the money, and Chainlink's explainer describes the lock, burn and mint designs in more detail.

Common bridge designs and what each relies on (checked 16 October 2026).
DesignHow it worksWhat you trustExample
Lock and mintTokens are locked on the source chain and a wrapped copy is minted on the destinationThe contract holding the locked tokens and whatever approves each mintPortal Bridge (Wormhole)
Burn and mintThe issuer burns the token on one chain and mints the same native token on the otherThe token issuerCircle's CCTP for USDC
Liquidity poolsYou pay into a pool on one chain and are paid from a pool of the same asset on the otherThe pool contracts, the messaging layer and enough liquidity on the far sideStargate Finance
Intent-basedA relayer pays you on the destination with its own tokens and is repaid laterThe relayer network and the system that settles repaymentsAcross Protocol
Canonical rollup bridgeThe layer 2's own bridge, secured by the rollup itselfThe rollup's contracts and whoever can upgrade them (on Arbitrum, a 9-of-12 Security Council that can act in an emergency); withdrawals wait out a challenge periodArbitrum Bridge

Many bridges also sit on a messaging layer. Stargate runs on LayerZero, where each app chooses its own set of verifiers (DVNs) and LayerZero recommends at least one that its own team does not run. A bridge is only as strong as the weakest party allowed to approve a transfer, so that verifier setup matters as much as the contract code.

How risky are crypto bridges?

Bridges are a favourite target because they hold large pools of locked tokens behind a few keys or a single verification path. In 2022, cross-chain bridges accounted for 64% of the $3.1 billion stolen from DeFi protocols, according to Chainalysis. By our calculation, that is about $2 billion. The FBI tied two of the largest thefts to North Korea's Lazarus Group.

Major bridge exploits, with amounts as reported by the sources listed at the end of this page.
BridgeDateLossWhat failed
RoninMarch 2022About $620 millionAttackers controlled five of the nine validator keys; the FBI attributed it to the Lazarus Group
BSC Token Hub (BNB Chain)October 2022About $560 to 570 millionA proof-verification bug let the attacker take 2 million BNB; most of it never left BNB Chain (The Block)
WormholeFebruary 2022About $320 to 325 millionA signature-check flaw let the attacker mint 120,000 wrapped ETH on Solana; Jump Crypto replaced the ETH the next day (incident report)
Harmony HorizonJune 2022$100 millionAnalysts said only two of five signatures were needed; the FBI attributed it to the Lazarus Group
NomadAugust 2022About $190 millionA faulty upgrade let anyone copy the first attacker's transaction; about $36 million came back (Mandiant)
MultichainJuly 2023About $126 to 130 millionUnexplained outflows (CoinDesk); the team said its detained CEO controlled the operating funds, and it shut down on 14 July 2023
Orbit BridgeJanuary 2024About $81.5 millionAssets left its Ethereum vault; no final root cause published, funds never recovered (Ozys statement)
KelpDAO rsETHApril 2026About $292 millionA route that relied on one verifier was fed false data (Chainalysis)

The KelpDAO exploit shows where the risk has moved. KelpDAO's LayerZero-based bridge relied on a single verifier, LayerZero Labs' own, and attackers fed it false data by compromising the servers it read from. Chainalysis called it an attack on off-chain infrastructure, not a smart contract hack. LayerZero says its verifier no longer signs for apps that rely on one verifier alone, and Kelp's developer has since sued LayerZero over who approved the setup, a claim LayerZero calls meritless. Before using any bridge, ask how many independent parties have to agree before your funds move.

A bridge that winds down can still hold your money. Orbit Bridge's migrated assets sit on the Silicon network, which stops withdrawals at 12:00 Korean time on 31 December 2026 and says anything left after that cannot be recovered; our Orbit Bridge review has the details. Hop Protocol looks inactive: DefiLlama marks its website as dead and records almost no volume in the past 30 days, and its last governance vote was in March 2025.

What does it cost to bridge crypto?

Most bridges quote one figure, and it is built from several parts:

  • Gas on the source chain to send the transaction, paid in that chain's native token.
  • A bridge or liquidity fee. On Across the total fee is the difference between what you deposit and what you receive, covering a liquidity-provider fee, a relayer fee and any app fee.
  • Gas on the destination chain, usually folded into the relayer's or the bridge's fee.
  • Slippage on pool-based routes when the far side is short of liquidity. Stargate lets you set a minimum amount received and cancels a transfer that would come in below it.

Speed is part of the price. Circle's CCTP moves native USDC with no Circle fee in standard mode, which takes 15 to 19 minutes from Ethereum and its layer 2s. Fast mode, where the source chain offers it, takes about 8 to 20 seconds and costs 0.01% to 0.13%. Arbitrum's own bridge takes 15 to 30 minutes to deposit but about a week to withdraw to Ethereum.

How do we score cross-chain bridges?

Six of the nine bridges on this page carry a score. Hop Protocol, Binance Bridge and Orbit Bridge stay online for reference without one. Every score uses the same five parts, set out in full in our bridge scoring methodology:

  • Security and audits (35%): audit firms and dates, the verification model, the incident record and how the team responded, and the value at stake against the signer threshold.
  • Transaction speed (20%): how the bridge settles and how long a transfer takes to arrive.
  • Fees (20%): documented liquidity, protocol and gas costs, plus slippage at retail sizes.
  • Chain and token coverage (15%): supported routes, and native rather than wrapped assets.
  • Reliability (10%): pauses, route outages and fallbacks when the main app is down.

A past exploit doesn't sink a score by itself. Whether users were repaid and what changed afterwards both count. We only rank bridges we have reviewed in full, so our best crypto bridges ranking draws on the nine reviews above.

Bridge reviews, rankings and tools

We have published full reviews of nine bridges: Across Protocol, Stargate Finance, Synapse Protocol, Orbiter Finance, Portal Bridge, Hop Protocol, Binance Bridge, Orbit Bridge and Arbitrum Bridge.

Frequently asked questions

Are crypto bridges safe?

Some are much safer than others, and none is risk-free. In 2022, bridges accounted for 64% of the $3.1 billion stolen from DeFi protocols (Chainalysis), and the KelpDAO exploit in April 2026 showed attackers now target verification setups as well as contract code. Check how many independent parties must approve a transfer, the audit and incident record, and whether the team repaid users after past problems.

How long does a bridge transfer take?

Anything from seconds to about a week. Intent-based bridges such as Across pay you on the destination chain once a relayer fills your order. Circle's CCTP takes about 8 to 20 seconds in fast mode, where the source chain offers it, and 15 to 19 minutes in standard mode from Ethereum and its layer 2s. Withdrawing from Arbitrum to Ethereum through the official bridge takes about seven days because of its challenge period.

How do you move USDC between chains without a wrapped token?

Use a route built on Circle's Cross-Chain Transfer Protocol (CCTP). It burns USDC on the source chain and mints native USDC on the destination, so you never hold a bridge's wrapped version. Standard transfers carry no Circle fee and fast transfers cost 0.01% to 0.13%. Circle is shutting down the old version, CCTP V1, between 31 October and 1 December 2026, so use an app that has moved to the current one. You are still trusting Circle, which issues USDC.

What happened to Multichain and Hop Protocol?

Multichain stopped operating on 14 July 2023, after about $126 to 130 million left its bridges without explanation and its team said the detained CEO had controlled the operating funds. Hop Protocol looks inactive: DefiLlama marks its website as dead and shows almost no recent volume. Our Hop Protocol review stays online as a record.

Sources

  1. [1]What is a cross-chain bridge? · Chainlink · published · accessed
  2. [2]Arbitrum One risk analysis · L2BEAT · accessed
  3. [3]Hackers steal $320 million in wrapped ether from Wormhole · Fortune (Bloomberg) · published · accessed
  4. [4]Harmony's $100 million hacker took control of its multi-signature wallet, analysts say · The Block · published · accessed
  5. [5]Dissecting the Nomad bridge hack · Google Cloud (Mandiant) · published · accessed
  6. [6]DefiLlama hacks database (bridge entries) · DefiLlama · accessed
  7. [7]Across: how relayers fill transfers · Across Protocol docs · accessed
  8. [8]Across: fees · Across Protocol docs · accessed
  9. [9]Cross-Chain Transfer Protocol (CCTP) · Circle · accessed
  10. [10]CCTP fees · Circle · accessed
  11. [11]Arbitrum bridge quickstart · Offchain Labs · accessed
  12. [12]LayerZero security stack (DVNs) · LayerZero · accessed
  13. [13]FBI statement on attribution of the Ronin theft · FBI · published · accessed
  14. [14]Wormhole incident report 02/02/22 · Wormhole · published · accessed
  15. [15]Wormhole replenishes its bridge after $325 million exploit · The Block · published · accessed
  16. [16]FBI confirms Lazarus Group responsible for Harmony's Horizon bridge theft · FBI · published · accessed
  17. [17]Nomad bridge hack: root cause analysis · Nomad · published · accessed
  18. [18]Multichain bridges see unannounced outflows of over $130M · CoinDesk · published · accessed
  19. [19]Multichain stops operations · Cointelegraph · published · accessed
  20. [20]Official statement regarding the Orbit Bridge exploit · Ozys (Orbit Chain) · published · accessed
  21. [21]2022: biggest year ever for crypto hacking · Chainalysis · published · accessed
  22. [22]KelpDAO bridge exploit, April 2026 · Chainalysis · published · accessed
  23. [23]KelpDAO incident statement · LayerZero · published · accessed
  24. [24]BNB Chain is back up after bridge exploit · The Block · published · accessed
  25. [25]KelpDAO sues LayerZero over the setup used in the rsETH exploit · The Block · published · accessed
  26. [26]Migrate to CCTP V2 ahead of the CCTP V1 (Legacy) deprecation · Circle · published · accessed
  27. [27]ORC staking suspension and asset transfer notice · Orbit Chain · published · accessed
  28. [28]Silicon: important service termination notice · Silicon · accessed
  29. [29]Hop Protocol on DefiLlama · DefiLlama · accessed

Related guides

Pair our bridge reviews with the primers on cross-chain mechanics and L2 architecture.