Cross-Chain Bridges reviewed
Compare cross-chain bridges across security audits, transaction speed, fees, chain coverage and historical reliability, using the same transparent scoring methodology.
Bridges we have reviewed
Across Protocol
Intent-based bridge with 2-second fills on the main Ethereum layer 2 routes
Stargate Finance
One-transaction transfers of native USDC, USDT and ETH between major EVM chains
Synapse Protocol
Long-running bridge that routes through pools, mint-and-burn, CCTP or intents
Orbiter Finance
Maker-run bridge covering 74 chains, including Starknet, TON and Tron
Portal Bridge
Wormhole's bridge for Solana, Sui, Algorand, Near and other non-EVM chains
Hop Protocol
Bonder-based Ethereum rollup bridge, now effectively abandoned
Binance Bridge
Custodial Binance bridge, no longer offered as a standalone product
Orbit Bridge
Lock-and-mint bridge hacked in 2024, no longer recommended
Arbitrum Bridge
Arbitrum's own bridge: no bridge fee and rollup-grade security, but slow withdrawals
Bridge buyer's guide
By Matilde Ferreira · Updated
What is a cross-chain bridge, and who are you trusting?
A cross-chain bridge moves tokens from one blockchain to another, but nothing actually travels. The bridge locks or burns your tokens on the source chain and releases or mints an equivalent on the destination, or a third party pays you from its own funds and is repaid later. Which of those happens decides who you are trusting with the money, and Chainlink's explainer describes the lock, burn and mint designs in more detail.
| Design | How it works | What you trust | Example |
|---|---|---|---|
| Lock and mint | Tokens are locked on the source chain and a wrapped copy is minted on the destination | The contract holding the locked tokens and whatever approves each mint | Portal Bridge (Wormhole) |
| Burn and mint | The issuer burns the token on one chain and mints the same native token on the other | The token issuer | Circle's CCTP for USDC |
| Liquidity pools | You pay into a pool on one chain and are paid from a pool of the same asset on the other | The pool contracts, the messaging layer and enough liquidity on the far side | Stargate Finance |
| Intent-based | A relayer pays you on the destination with its own tokens and is repaid later | The relayer network and the system that settles repayments | Across Protocol |
| Canonical rollup bridge | The layer 2's own bridge, secured by the rollup itself | The rollup's contracts and whoever can upgrade them (on Arbitrum, a 9-of-12 Security Council that can act in an emergency); withdrawals wait out a challenge period | Arbitrum Bridge |
Many bridges also sit on a messaging layer. Stargate runs on LayerZero, where each app chooses its own set of verifiers (DVNs) and LayerZero recommends at least one that its own team does not run. A bridge is only as strong as the weakest party allowed to approve a transfer, so that verifier setup matters as much as the contract code.
How risky are crypto bridges?
Bridges are a favourite target because they hold large pools of locked tokens behind a few keys or a single verification path. In 2022, cross-chain bridges accounted for 64% of the $3.1 billion stolen from DeFi protocols, according to Chainalysis. By our calculation, that is about $2 billion. The FBI tied two of the largest thefts to North Korea's Lazarus Group.
| Bridge | Date | Loss | What failed |
|---|---|---|---|
| Ronin | March 2022 | About $620 million | Attackers controlled five of the nine validator keys; the FBI attributed it to the Lazarus Group |
| BSC Token Hub (BNB Chain) | October 2022 | About $560 to 570 million | A proof-verification bug let the attacker take 2 million BNB; most of it never left BNB Chain (The Block) |
| Wormhole | February 2022 | About $320 to 325 million | A signature-check flaw let the attacker mint 120,000 wrapped ETH on Solana; Jump Crypto replaced the ETH the next day (incident report) |
| Harmony Horizon | June 2022 | $100 million | Analysts said only two of five signatures were needed; the FBI attributed it to the Lazarus Group |
| Nomad | August 2022 | About $190 million | A faulty upgrade let anyone copy the first attacker's transaction; about $36 million came back (Mandiant) |
| Multichain | July 2023 | About $126 to 130 million | Unexplained outflows (CoinDesk); the team said its detained CEO controlled the operating funds, and it shut down on 14 July 2023 |
| Orbit Bridge | January 2024 | About $81.5 million | Assets left its Ethereum vault; no final root cause published, funds never recovered (Ozys statement) |
| KelpDAO rsETH | April 2026 | About $292 million | A route that relied on one verifier was fed false data (Chainalysis) |
The KelpDAO exploit shows where the risk has moved. KelpDAO's LayerZero-based bridge relied on a single verifier, LayerZero Labs' own, and attackers fed it false data by compromising the servers it read from. Chainalysis called it an attack on off-chain infrastructure, not a smart contract hack. LayerZero says its verifier no longer signs for apps that rely on one verifier alone, and Kelp's developer has since sued LayerZero over who approved the setup, a claim LayerZero calls meritless. Before using any bridge, ask how many independent parties have to agree before your funds move.
A bridge that winds down can still hold your money. Orbit Bridge's migrated assets sit on the Silicon network, which stops withdrawals at 12:00 Korean time on 31 December 2026 and says anything left after that cannot be recovered; our Orbit Bridge review has the details. Hop Protocol looks inactive: DefiLlama marks its website as dead and records almost no volume in the past 30 days, and its last governance vote was in March 2025.
What does it cost to bridge crypto?
Most bridges quote one figure, and it is built from several parts:
- Gas on the source chain to send the transaction, paid in that chain's native token.
- A bridge or liquidity fee. On Across the total fee is the difference between what you deposit and what you receive, covering a liquidity-provider fee, a relayer fee and any app fee.
- Gas on the destination chain, usually folded into the relayer's or the bridge's fee.
- Slippage on pool-based routes when the far side is short of liquidity. Stargate lets you set a minimum amount received and cancels a transfer that would come in below it.
Speed is part of the price. Circle's CCTP moves native USDC with no Circle fee in standard mode, which takes 15 to 19 minutes from Ethereum and its layer 2s. Fast mode, where the source chain offers it, takes about 8 to 20 seconds and costs 0.01% to 0.13%. Arbitrum's own bridge takes 15 to 30 minutes to deposit but about a week to withdraw to Ethereum.
How do we score cross-chain bridges?
Six of the nine bridges on this page carry a score. Hop Protocol, Binance Bridge and Orbit Bridge stay online for reference without one. Every score uses the same five parts, set out in full in our bridge scoring methodology:
- Security and audits (35%): audit firms and dates, the verification model, the incident record and how the team responded, and the value at stake against the signer threshold.
- Transaction speed (20%): how the bridge settles and how long a transfer takes to arrive.
- Fees (20%): documented liquidity, protocol and gas costs, plus slippage at retail sizes.
- Chain and token coverage (15%): supported routes, and native rather than wrapped assets.
- Reliability (10%): pauses, route outages and fallbacks when the main app is down.
A past exploit doesn't sink a score by itself. Whether users were repaid and what changed afterwards both count. We only rank bridges we have reviewed in full, so our best crypto bridges ranking draws on the nine reviews above.
Bridge reviews, rankings and tools
We have published full reviews of nine bridges: Across Protocol, Stargate Finance, Synapse Protocol, Orbiter Finance, Portal Bridge, Hop Protocol, Binance Bridge, Orbit Bridge and Arbitrum Bridge.
- Best crypto bridges, ranked: our picks by use case.
- Compare cross-chain bridges: scores and coverage side by side.
- How to bridge crypto: a walkthrough for your first transfer.
- What is a rollup?: why layer 2 networks need bridges at all.
Frequently asked questions
Are crypto bridges safe?
Some are much safer than others, and none is risk-free. In 2022, bridges accounted for 64% of the $3.1 billion stolen from DeFi protocols (Chainalysis), and the KelpDAO exploit in April 2026 showed attackers now target verification setups as well as contract code. Check how many independent parties must approve a transfer, the audit and incident record, and whether the team repaid users after past problems.
How long does a bridge transfer take?
Anything from seconds to about a week. Intent-based bridges such as Across pay you on the destination chain once a relayer fills your order. Circle's CCTP takes about 8 to 20 seconds in fast mode, where the source chain offers it, and 15 to 19 minutes in standard mode from Ethereum and its layer 2s. Withdrawing from Arbitrum to Ethereum through the official bridge takes about seven days because of its challenge period.
How do you move USDC between chains without a wrapped token?
Use a route built on Circle's Cross-Chain Transfer Protocol (CCTP). It burns USDC on the source chain and mints native USDC on the destination, so you never hold a bridge's wrapped version. Standard transfers carry no Circle fee and fast transfers cost 0.01% to 0.13%. Circle is shutting down the old version, CCTP V1, between 31 October and 1 December 2026, so use an app that has moved to the current one. You are still trusting Circle, which issues USDC.
What happened to Multichain and Hop Protocol?
Multichain stopped operating on 14 July 2023, after about $126 to 130 million left its bridges without explanation and its team said the detained CEO had controlled the operating funds. Hop Protocol looks inactive: DefiLlama marks its website as dead and shows almost no recent volume. Our Hop Protocol review stays online as a record.
Sources
- [1]What is a cross-chain bridge? · Chainlink · published · accessed
- [2]Arbitrum One risk analysis · L2BEAT · accessed
- [3]Hackers steal $320 million in wrapped ether from Wormhole · Fortune (Bloomberg) · published · accessed
- [4]Harmony's $100 million hacker took control of its multi-signature wallet, analysts say · The Block · published · accessed
- [5]Dissecting the Nomad bridge hack · Google Cloud (Mandiant) · published · accessed
- [6]DefiLlama hacks database (bridge entries) · DefiLlama · accessed
- [7]Across: how relayers fill transfers · Across Protocol docs · accessed
- [8]Across: fees · Across Protocol docs · accessed
- [9]Cross-Chain Transfer Protocol (CCTP) · Circle · accessed
- [10]CCTP fees · Circle · accessed
- [11]Arbitrum bridge quickstart · Offchain Labs · accessed
- [12]LayerZero security stack (DVNs) · LayerZero · accessed
- [13]FBI statement on attribution of the Ronin theft · FBI · published · accessed
- [14]Wormhole incident report 02/02/22 · Wormhole · published · accessed
- [15]Wormhole replenishes its bridge after $325 million exploit · The Block · published · accessed
- [16]FBI confirms Lazarus Group responsible for Harmony's Horizon bridge theft · FBI · published · accessed
- [17]Nomad bridge hack: root cause analysis · Nomad · published · accessed
- [18]Multichain bridges see unannounced outflows of over $130M · CoinDesk · published · accessed
- [19]Multichain stops operations · Cointelegraph · published · accessed
- [20]Official statement regarding the Orbit Bridge exploit · Ozys (Orbit Chain) · published · accessed
- [21]2022: biggest year ever for crypto hacking · Chainalysis · published · accessed
- [22]KelpDAO bridge exploit, April 2026 · Chainalysis · published · accessed
- [23]KelpDAO incident statement · LayerZero · published · accessed
- [24]BNB Chain is back up after bridge exploit · The Block · published · accessed
- [25]KelpDAO sues LayerZero over the setup used in the rsETH exploit · The Block · published · accessed
- [26]Migrate to CCTP V2 ahead of the CCTP V1 (Legacy) deprecation · Circle · published · accessed
- [27]ORC staking suspension and asset transfer notice · Orbit Chain · published · accessed
- [28]Silicon: important service termination notice · Silicon · accessed
- [29]Hop Protocol on DefiLlama · DefiLlama · accessed
Related guides
Pair our bridge reviews with the primers on cross-chain mechanics and L2 architecture.
How to Bridge Crypto: 2026 Complete Guide
How to bridge crypto in 2026: Across, Wormhole, Stargate, Circle CCTP, and L2 native bridges. Route selection, fees, and lessons from $328M of bridge exploits by May 2026.
What is a Rollup? 2026 Optimistic + ZK L2 Guide + TVL
What is a rollup in 2026: 73 active Ethereum L2s with $48B TVL, optimistic vs ZK trade-offs, Arbitrum + Base lead at 77% combined share, post-EIP-4844 fees.
What is DeFi? 2026 Decentralized Finance Guide
What is DeFi? Decentralized finance in 2026: $95-140B TVL, Aave + Lido lead, MiCA-regulated stablecoins, BTC/ETH collateral, institutional adoption.