Exchanges
Best Crypto Exchanges Futures Exchanges Options Platforms Derivatives Exchanges Decentralized Exchanges DEX Aggregators Crypto Bridges Memecoin Platforms Binance MEXC Coinbase Bybit
Wallets
Best Crypto Wallets Best Hardware Wallets Best Ethereum Wallets Ledger Trezor
Trading Tools
Best Trading Bots Telegram Trading Bots Best Staking Best Lending Copy Trading 3Commas
Guides
How to Buy Ethereum Day Trading Guide
News Subscribe to newsletter
Share IT
CROSS-CHAIN · 2026 EDITION

The 12 best crypto bridges to move tokens across chains, ranked by security, not hype.

Bridges are the most-hacked thing in crypto: over $2.8B stolen since 2022. We ranked 12 bridges by the only metric that matters first, whether your funds sit in a honeypot, then by chains, fees, and speed. Intent-based and native-verification bridges win. We also disclose every major bridge hack in full.

CoinCodeCap Editorial · Reviewed by Gaurav Agarwal · Updated May 2026
See the 12 bridges →
BRIDGE.MONITOR
12 bridges · May 2026
Stolen from bridges since 2022$2.8B+
Ronin Bridge hack$625M
Wormhole hack$325M
Across cumulative volume$28B+
Stargate volume$70B+
Safest modelIntent / native
Most chains (Squid)100+
Sponsored picks0
12
bridges ranked
$2.8B+
stolen from bridges
4
bridge mechanisms explained
12
hacks documented in full

How we ranked them. Security first, hype never.

Five criteria, weighted toward not losing your money.

01

No honeypot

Does the bridge hold pooled liquidity or locked collateral behind a multisig? Intent and native-verification designs that hold nothing rank highest.

02

Hack record

Clean history, or a hack that was fully reimbursed and hardened. Zero tolerance for repeat incidents or opaque recoveries.

03

Chains + assets

How many chains, and whether it reaches non-EVM (Solana, Bitcoin, Cosmos), not just the easy EVM L2s.

04

Real cost + speed

All-in fee (bridge + gas), whether destination gas is covered, and actual settlement time we measured.

05

Audits + transparency

Recent third-party audits, public team, open-source contracts. Anonymous teams holding pooled funds get marked down.

The podium. Top 3 at a glance.

★ EDITOR’S PICK
Across

1. Across

Intent · UMA-secured · zero exploits

Cheapest and fastest for Ethereum↔L2. Relayers front your funds; no pooled honeypot. $28B+ volume, zero hacks, UMA optimistic bonds.

Read review →
Debridge

2. deBridge

Intent · zero locked liquidity

Fastest EVM↔Solana↔Tron settlement, 15–90 seconds. No wrapped assets, nothing to drain. Best for Solana flows.

Read review →
Chainflip

3. Chainflip

Native swaps · zero wrapped assets

Truly native BTC↔ETH↔SOL. No wrapped tokens, no depeg risk. The pick for moving real Bitcoin in and out of DeFi.

Read review →

The 12 bridges compared. Side-by-side.

Every way to bridge tokens between blockchains, compared side by side: mechanism, chains, speed, hack history, and best use.

# Bridge Mechanism Chains Speed Hacked? Try
1AcrossIntent15+~1–4 minNeverTry →
2deBridgeIntent26+15–90 sNeverTry →
3ChainflipNative swapBTC/ETH/SOL+2–5 minNeverTry →
4JumperAggregator30+VariesLI.FI $10M ’24Try →
5StargateLiquidity pool80+SecondsNo pool drainTry →
6AxelarPoS network60+1–3 minNeverTry →
7SquidAggregator100+<20 sNeverTry →
8HopLiquidity pool6 L2s<1 minNeverTry →
9SynapsePool + optimistic20+MinutesPool honeypotTry →
10Celer cBridgePool + canonical40+Sec–minDNS hijack ’22Try →
11OrbiterMaker model19+10–20 sPhishing magnetTry →
12WormholeLock-and-mint30+Sec–min$325M ’22Try →

Volume/TVL figures from DefiLlama, May 2026 snapshot. “Hacked?” reflects protocol-level incidents; front-end/phishing and integration hacks noted separately. Sources in each review below.

All 12 bridges, reviewed in depth.

Mechanism, real fees, security model, and hack history for each. Tested with real transfers May 2026.

Affiliate disclosure · editorial integrity

Some bridges below pay CoinCodeCap a referral commission via our /go/ links. Security record is the #1 ranking factor, and payouts do not move the order. Across, deBridge, and Chainflip top the list because they avoid the pooled-liquidity honeypot, not because of commissions.

Using a /go/ link costs you nothing extra. We rank decentralized protocols with no affiliate program (Hop, Axelar) on pure merit alongside the rest.

Across

1. Across Protocol ★ Editor’s pick

Founded 2021 by Risk Labs (UMA) · Intent-based · 15+ chains · zero exploits · ACX token
Mechanism
Intent
Volume
$28B+
Speed
1–4 min
Hacks
Zero
+ What worked

The cheapest and fastest way to move from Ethereum to Arbitrum, Base, or Optimism. Relayers front your funds on the destination instantly, then get reimbursed from the source pool after UMA’s Optimistic Oracle validates the fill, so there’s no wrapped-asset honeypot mid-transfer. Gas-on-destination is native to the model: the solver delivers the exact output token. UMA bonds plus a 48-hour upgrade timelock secure it. Audited by OpenZeppelin (May 2025) and Trail of Bits. Solana bridging added August 2025. $28B+ bridged, zero exploits.

− What didn’t

Focused on high-liquidity blue-chip assets, not the long tail of obscure tokens. Fewer exotic chains than Wormhole or Squid. The optimistic settlement adds a short delay versus pure pooled bridges, though relayers usually hide it.

ACROSS · INTENT BRIDGE
Secured by: UMA Optimistic Oracle
Pool honeypot: None (relayers front)
Chains: ETH, ARB, OP, Base, Solana +
USDC: Native via CCTP
Best for: ETH → L2, cheapest + safest
Open Across →
Debridge

2. deBridge ★ Best for Solana

Founded 2021 · Intent/solver (DLN) · 26+ chains · zero locked liquidity · DBR token
Mechanism
Intent (DLN)
Speed
15–90 s
Locked TVL
~Zero
Hacks
Zero
+ What worked

The fastest EVM↔Solana↔Tron transfers we tested, with a ~30-second median for EVM-to-EVM. Professional market-maker solvers fill orders peer-to-peer through the DLN. There’s zero pooled or locked liquidity, so literally no honeypot to drain. Assets are never wrapped. Strong Solana coverage makes it our pick for cross-ecosystem flows. Audited by Halborn including the December 2024 DLN/Solana contracts. No protocol exploit to date.

− What didn’t

A flat fee component makes sub-$500 transfers relatively pricier per dollar moved. The solver network needs liquidity for your specific route, so exotic pairs occasionally wait longer for a filler. Newer DBR token with thinner liquidity than ACX or STG.

DEBRIDGE · DLN
Model: Solver intent, P2P
Pool honeypot: None
Median speed: ~30 s EVM↔EVM
Solana: First-class
Best for: Solana ↔ EVM, speed
Open deBridge →
Chainflip

3. Chainflip ★ Native BTC

Native cross-chain swaps · NO wrapped assets · 150-validator vaults · FLIP token
Mechanism
Native swap
Wrapped assets
None
Q4’25 volume
$1.69B
Hacks
Zero
+ What worked

The only bridge here that moves truly native assets (real BTC, real ETH, real SOL) with no wrapped tokens, no bridges in the traditional sense, and no pooled honeypot. A Just-in-Time AMM supplies liquidity only at swap time; 150 validators control threshold-signature vaults backed by FLIP staking and slashing. Because outputs are native L1 assets, there is zero wrapped-asset depeg risk. Record $1.69B swap volume in Q4 2025. No exploit to date.

− What didn’t

Native Bitcoin swaps take ~30–40 minutes because Chainflip waits for 3-block confirmation for security. That’s slower than wrapped-BTC shortcuts, but far safer. Fewer total chains than aggregators. The JIT AMM can show wider spreads on thin pairs.

CHAINFLIP · NATIVE
Assets: Native BTC/ETH/SOL/DOT
Wrapped: None, no depeg risk
Vaults: 150-validator threshold sig
BTC swap: ~30–40 min (secure)
Best for: Native Bitcoin in/out of DeFi
Open Chainflip →
Jumper

4. Jumper Exchange ★ Best aggregator

LI.FI routing engine · 30+ chains · 18+ bridges · 32+ DEXs · no custody of its own
Mechanism
Aggregator
Bridges routed
18+
Own fee
None
Chains
30+
+ What worked

The “route me the best way” front-end. It queries 18+ bridges and 32+ DEXs and stitches the optimal source-swap → bridge → destination-swap into one approved flow. It doesn’t bridge itself or take custody. It inherits whichever bridge it routes through, so it adds smart routing, not new risk. Charges no fee of its own. The single best starting point if you don’t know which bridge to pick.

− What didn’t

LI.FI’s core contracts suffered a ~$10M exploit in July 2024 that hit users holding stale unlimited approvals to an old contract. It’s since been patched, but it’s a reminder to approve exact amounts. You inherit the risk of whichever underlying bridge it selects, so check the route before confirming.

JUMPER · LI.FI
Routes: 18+ bridges, 32+ DEXs
Own custody: None
Own fee: Zero
2024 note: LI.FI $10M approval exploit
Best for: “Pick the best route for me”
Open Jumper →
Stargate

5. Stargate Finance

LayerZero · unified-liquidity pools · 80+ chains · $70B+ volume · STG token
Mechanism
Liquidity pool
Chains
80+
Volume
$70B+
Speed
Seconds
+ What worked

The deepest unified-liquidity stablecoin routing across the most chains, 80+ via LayerZero. Native asset transfers with instant guaranteed finality through shared pools that rebalance via its delta algorithm, so no wrapping. $70B+ cumulative volume puts it among the highest-volume bridges. No Stargate-pool drain to date. LayerZero v2 messaging underpins it.

− What didn’t

Pooled liquidity is a larger attack surface than the intent bridges above, and security ultimately rests on LayerZero’s configurable verifier setup. The August 2025 LayerZero Foundation buyout converting STG to ZRO muddied the token story, so confirm current status before holding STG.

STARGATE · LAYERZERO
Model: Unified liquidity pools
Chains: 80+
Finality: Instant guaranteed
Messaging: LayerZero v2
Best for: High-volume stablecoins, many chains
Open Stargate →
Axelar

6. Axelar

Proof-of-stake interchain · ~75 validators · 60+ chains · AXL token · powers Squid
Mechanism
PoS network
Validators
~75
Chains
60+
Hacks
Zero
+ What worked

Programmable cross-chain messaging secured by a real proof-of-stake validator set. Roughly 75 validators stake AXL and jointly control gateways via threshold signatures, so no single node can move funds. That is a far stronger trust model than the small multisigs behind the biggest hacks. Fully open-source, no custodial components, slashing for misbehavior. General Message Passing lets apps build true cross-chain logic. Powers Squid Router.

− What didn’t

More of a developer/app interop layer than a slick consumer UI, so most people will use it indirectly through Squid. axlUSDC and other Axelar-wrapped assets are still wrapped representations, so they carry the usual wrapped-asset caveat for large holdings.

AXELAR · POS INTEROP
Security: ~75-validator PoS + slashing
Gateways: Threshold signatures
Use: General Message Passing
Powers: Squid Router
Best for: Developers, secure messaging
Open Axelar →
Squid

7. Squid Router ★ Most chains

Aggregator on Axelar · 100+ chains · 20,000+ tokens · multi-protocol hopping
Mechanism
Aggregator
Chains
100+
Tokens
20,000+
Speed
<20 s
+ What worked

The widest reach of any single-click router: 100+ chains and 20,000+ tokens spanning EVM, Solana, Cosmos, Sui, XRPL, Stellar, Hedera, and Celo. It combines Axelar, Circle CCTP, IBC, Chainflip, and LayerZero and can do source-swap → bridge → destination-swap in one transaction. Sub-20-second swaps on fast routes. Inherits Axelar’s PoS security plus whichever protocol it hops through.

− What didn’t

Reaching exotic chains means inheriting the risk of less-proven underlying bridges on those routes. The breadth can overwhelm new users. (Note: the “SQUID” Squid Game memecoin rug of 2021 is an unrelated project; don’t confuse the two.)

SQUID · AXELAR ROUTER
Reach: 100+ chains, 20k+ tokens
Combines: Axelar, CCTP, Chainflip, LZ
One tx: Swap → bridge → swap
Security: Axelar PoS + route
Best for: Reaching obscure chains/tokens
Open Squid →
Hop

8. Hop Protocol

Founded 2021 (Authereum team) · optimistic L2 bridge · hToken + AMM · HOP token
Mechanism
Pool + optimistic
Focus
L2 ↔ L2
Fee
~$0.10
Hacks
Zero
+ What worked

Purpose-built for cheap, fast L2-to-L2 hops between Arbitrum, Optimism, Polygon, Gnosis, and Base. “Bonders” front liquidity on the destination and get reimbursed when the transfer settles via L1, with a 24-hour challenge window and watchers who earn 7.5% of a fraudulent transfer root. Bonder fees ran around $0.10 in 2025, very cheap for L2 hops. Open-source contracts, no major exploit, fully community-governed via Hop DAO.

− What didn’t

L2-centric and limited to a handful of chains, with no Solana or non-EVM reach. Pooled AMM liquidity carries the usual honeypot caveat, and the optimistic model means watchers must stay honest. No affiliate program, ranked purely on merit.

HOP · L2 BRIDGE
Built for: L2 ↔ L2 hops
Chains: ARB/OP/Polygon/Gnosis/Base
Fee: ~$0.10 + slippage
Challenge: 24h optimistic window
Best for: Arbitrum ↔ Optimism, cheap
Open Hop →
Synapse

9. Synapse Protocol

Founded 2021 · optimistic messaging + stableswap AMM · 20+ chains · SYN token
Mechanism
Pool + optimistic
Chains
20+
Volume
$12B+
Users
2M+
+ What worked

A mature cross-chain stableswap with deep multi-chain reach across 20+ networks and $12B+ cumulative volume from 2M+ users. The stableswap AMM gives clean stablecoin routing, and the team is building Synapse Chain (an optimistic rollup) for cross-chain execution. Solid choice if you specifically want AMM-based stablecoin routing.

− What didn’t

It combines two attack surfaces: pooled AMM liquidity (a standing honeypot) plus optimistic messaging that depends on off-chain guards challenging bad messages in time. That’s a heavier trust stack than the intent bridges above. It ranks below them for that reason despite its maturity.

SYNAPSE
Model: Stableswap AMM + optimistic
Volume: $12B+ · 2M+ users
Building: Synapse Chain (rollup)
Risk: Pool + challenge window
Best for: AMM stablecoin routing
Open Synapse →
Celer

10. Celer cBridge

Founded 2018 · pooled + canonical · State Guardian Network PoS · 40+ chains · CELR
Mechanism
Pool + canonical
Chains
40+
Volume
$14B+
Front-end hack
DNS ’22
+ What worked

Wide coverage across 40+ chains with two modes: xLiquidity (pooled transfers) and xAsset (canonical lock-and-mint), routed by the State Guardian Network, a Tendermint PoS chain with CELR staking and slashing. $14B+ cumulative transactions. Flexible if you want both pooled and canonical options in one place.

− What didn’t

In August 2022 Celer suffered a BGP/DNS hijack that drained roughly $240K from users through a spoofed front-end. The contracts were fine, but it’s a stark reminder that the website itself is an attack surface. xLiquidity pooled funds carry the usual honeypot caveat. Always reach cBridge from the official domain.

CELER cBRIDGE
Modes: xLiquidity + xAsset
Secured by: SGN PoS (CELR)
Chains: 40+
2022: DNS-hijack front-end attack
Best for: Flexible multi-chain routing
Open cBridge →
Orbiter

11. Orbiter Finance

L2-to-L2 specialist · Maker model + ZK-SPV arbitration · 19+ chains · OBT token
Mechanism
Maker model
Speed
10–20 s
Fee
~0.1–0.3%
Main risk
Phishing clones
+ What worked

Fast and cheap pure L2-to-L2 transfers via a Maker model: you send to a market maker’s address on the source chain and they deliver on the destination, backed by MDC margin contracts and ZK-SPV on-chain arbitration. Typical transfers settle in 10–20 seconds at ~0.1–0.3%, with very low gas. Expanding from 19 core networks toward 70+.

− What didn’t

A smaller, newer trust model than the PoS networks, and the brand is a heavy phishing target; fake “orbiter-finance” clones are common. The practical risk here is landing on a fake site, not a contract drain. Only reach it from the official domain, and bookmark it.

ORBITER · L2 MAKER
Model: Maker + ZK-SPV arbitration
Speed: 10–20 s
Fee: ~0.1–0.3%
Warning: Phishing-clone magnet
Best for: Quick cheap L2 ↔ L2
Open Orbiter →
Wormhole

12. Wormhole / Portal ⚠ $325M hack

Launched 2021 by Jump Crypto · lock-and-mint · 13-of-19 Guardians · 30+ chains · W token
Mechanism
Lock-and-mint
Guardians
13-of-19
Non-EVM reach
Best
2022 hack
$325M
+ What worked

The broadest non-EVM reach of any messaging layer: Solana, Sui, Aptos, Cosmos/IBC, Algorand, NEAR, and 30+ chains in total. It underpins Mayan, Portal, and many app-specific bridges, and now powers CCTP routes too. $65B+ processed by 2026, 29+ audits, and a $225M raise at a $2.5B valuation finalized its split from Jump Crypto. If you need to reach an exotic chain, Wormhole usually can.

− What didn’t

In February 2022 a Solana-side signature-verification flaw let an attacker mint 120,000 unbacked wETH worth $325M, the second-largest hack in bridge history. Jump Crypto fully replaced the funds from reserves. The Portal token bridge is still lock-and-mint behind a 13-of-19 Guardian set, so guardian collusion remains the core trust assumption. Use it for reach, not for parking large wrapped balances.

WORMHOLE · PORTAL
Model: Lock-and-mint (wrapped)
Trust: 13-of-19 Guardians
Reach: Solana, Sui, Aptos, Cosmos
2022: $325M hack (reimbursed)
Best for: Reaching exotic non-EVM chains
Open Wormhole →

The bridge hack ledger. $2.8B+ stolen since 2022.

Bridges are the single most-exploited category in crypto, roughly 40% of all DeFi exploit losses. A bridge concentrates pooled liquidity or locked collateral in one set of contracts, a standing honeypot, and its safety rests on an external validator set, multisig, or MPC committee. Compromise the keys or forge a proof and the whole pool drains at once. Note that the biggest losses came from private-key and multisig compromise, not contract bugs, which is exactly why intent and native-verification designs now win.

🔴 Ronin Bridge (Axie / Sky Mavis)

$625M · partial recovery
MARCH 2022 · LARGEST BRIDGE HACK

Five of nine validator private keys were compromised via social engineering by the Lazarus Group (DPRK), and the theft went undetected for six days. Sky Mavis reimbursed users via a funding round; over $30M was later seized by law enforcement and OFAC sanctioned the address. The textbook case for why a 5-of-9 multisig is not enough security for $600M. Full Ronin Bridge hack breakdown →

🟢 Poly Network

$611M · fully returned
AUGUST 2021

An attacker exploited a cross-chain contract function to forge keeper instructions and drained $611M, then returned nearly all of it within about 15 days, dubbing themselves “Mr. White Hat.” The largest hack-and-return in crypto history, but a reminder that the vulnerability was real even if the outcome was benign.

🟡 BSC Token Hub (Binance Bridge)

~$570M minted · mostly frozen
OCTOBER 2022

The attacker forged an IAVL Merkle proof for an old block to mint 2M BNB out of thin air. BNB Chain validators halted the entire chain to contain it, freezing most of the minted BNB before it could be extracted. Roughly $110M got out. A lock-and-mint proof-forgery attack on a massive scale.

🟢 Wormhole

$325M · backstopped by Jump
FEBRUARY 2022

A Solana-side signature-verification flaw let the attacker mint 120,000 unbacked wETH. Jump Crypto replaced the entire $325M from its own reserves within days to keep wormhole-wETH solvent, the only reason holders didn’t eat the loss. A vivid lesson in wrapped-asset backing risk. Full Wormhole hack breakdown →

🟡 Nomad Bridge

$190M · ~$22M+ returned
AUGUST 2022 · THE “FREE-FOR-ALL”

A faulty upgrade set the trusted root to 0x00, which made any message “proven,” so copy-pasting one working transaction with your own address drained funds. A chaotic public mob emptied the bridge in hours. White hats returned $22M+; a key suspect was later extradited to the US. Proof that a single bad config line can be catastrophic. Full Nomad Bridge hack breakdown →

🔴 Multichain (Anyswap)

~$130M · largely unrecovered
JULY 2023 · SUSPECTED INSIDE JOB

An opaque collapse after CEO Zhaojun’s arrest in China; the team lost access to the MPC node servers and over $130M moved out in a suspected inside job. The protocol shut down and funds were largely never recovered. The cautionary tale for MPC bridges with a centralized operator.

🔴 Harmony Horizon Bridge

$100M · mostly unrecovered
JUNE 2022 · LAZARUS / DPRK

A 2-of-5 multisig was compromised, so an attacker only needed two of five signing keys to move everything. Attributed to the Lazarus Group. Mostly unrecovered. Another data point that small multisigs guarding large pools are the highest-risk design in crypto.

🔴 Orbit Chain (Ozys)

~$81.5M · laundered via Tornado
JANUARY 2024

Seven of ten multisig signers were compromised and funds were laundered through Tornado Cash. Largely unrecovered. A 2024 reminder that the multisig-compromise pattern that drove 2022’s losses hadn’t gone away.

🔴 Kelp DAO / LayerZero integration

~$292M · 2026’s largest
APRIL 2026 · UNDER INVESTIGATION

A forged cross-chain instruction against a LayerZero integration drained roughly 116,500 rsETH, the largest DeFi hack of 2026 so far. Under investigation at the time of writing. Proof that even modern messaging-layer integrations remain a target when integration code is flawed.

Sources: Elliptic, Chainalysis, TRM Labs, Immunefi, Halborn, CertiK, The Block, CoinDesk. Smaller 2026 incidents (IoTeX ioTube ~$4.3M, CrossCurve ~$3M) omitted for length. The “$2.8B+ since 2022” figure is the conservative industry total excluding returned Poly Network funds.

Decision tree. 5 use cases.

Skip the rankings. Find your row.

ETH → ARB/BASE, CHEAPEST

Across

Relayer-fronted intent, lowest fees, fast. Or the canonical bridge if you can wait for lowest trust.

→ /go/across
NEED NATIVE USDC

CCTP route

Circle CCTP V2 via Across, Wormhole, or Squid: burn-and-mint native USDC, no wrapped depeg risk.

→ /go/across · /go/squid
SOLANA ↔ EVM

deBridge or Mayan

Native, fast intent/auction settlement. Wormhole for the most exotic destinations.

→ /go/debridge · /go/mayan
L2 → L2, FASTEST

Hop or Orbiter

Purpose-built, cheap, seconds-to-a-minute Arbitrum ↔ Optimism ↔ Base hops.

→ /go/hop · /go/orbiter
JUST ROUTE ME BEST

Jumper or Squid

Aggregators that compare every bridge and pick the optimal route in one click.

→ /go/jumper · /go/squid

5 red flags that get people rekt bridging.

Most bridge losses are avoidable. These five cause the majority.

⚠️

Phishing fake-bridge sites

The #1 way people lose funds. Fake “Across”, “Orbiter”, “Synapse” domains abound. Reach the bridge only from its official site or docs, never a search ad. Celer’s 2022 DNS hijack drained users through a spoofed UI.

⚠️

Unlimited token allowances

Approving an “unlimited” allowance to a bridge means a future bug can drain that token. Exactly how the July 2024 LI.FI exploit hit users. Approve exact amounts; revoke stale approvals.

⚠️

Wrapped-asset depeg risk

A wrapped token is only worth its backing. If the bridge is exploited, the IOU can crater. Prefer native-asset bridges (Chainflip, CCTP, canonical) for large sums.

⚠️

Wrong chain / wrong address

Bridging is irreversible. Sending to an exchange deposit address that doesn’t support the destination chain, or fat-fingering a chain, can lose funds forever. Triple-check both chains and the address.

⚠️

Unaudited new bridges

A brand-new bridge with pooled liquidity and no audit track record is the worst place to leave value mid-transfer. Check for recent audits and a clean exploit history first.

Your first bridge transfer, in 5 steps.

Using Across to move USDC from Ethereum to Base as the worked example.

  1. 01

    Reach the real site.

    Type the official URL or use a bookmark. Never click a search ad or a link from DMs. Verify the domain character-by-character. This single step prevents the most common loss.

  2. 02

    Connect + set route.

    Connect your wallet. Set source = Ethereum, destination = Base, asset = USDC. Across will quote the fee and estimated time. Confirm the destination chain is exactly what you intend.

  3. 03

    Approve the exact amount.

    When prompted for the token approval, set it to the exact amount you’re bridging, not unlimited. This caps your exposure if the contract is ever compromised.

  4. 04

    Confirm + wait.

    Sign the transfer. A relayer fronts your USDC on Base, usually within a minute. You keep the transaction hash; you can track settlement on the Across explorer.

  5. 05

    Verify on the destination.

    Switch your wallet to Base and confirm the native USDC arrived. Add the token contract if it doesn’t auto-display. For a first transfer, send a small test amount before moving a large sum.

7 frequently asked questions.

?What is a crypto bridge and how does it work?

A crypto bridge moves tokens from one blockchain to another. Four mechanisms exist: lock-and-mint (lock the real asset on chain A, mint a wrapped IOU on chain B), liquidity-pool (pools of the real asset on each chain), intent/solver-based (a relayer fronts the output and gets reimbursed after on-chain verification), and native verification (the destination chain cryptographically verifies the source state itself). Intent and native-verification designs are safest because they avoid the pooled-liquidity honeypot that has cost the industry over $2.8B.

?Which crypto bridge is the safest in 2026?

By design, Chainflip (native L1 swaps, zero wrapped assets), Across (intent with UMA bonds, no protocol-held liquidity), and deBridge (solver-based, zero locked liquidity) rank highest because there is no pooled honeypot to drain. Canonical bridges (official Arbitrum, Optimism, Base) are the lowest-trust option for L1-to-L2 if you can wait out the withdrawal window. Lock-and-mint bridges holding pooled liquidity behind a small validator set carry the most risk.

?Why are crypto bridges hacked so often?

Over $2.8B has been stolen from bridges since 2022, roughly 40% of all DeFi exploit losses. Bridges concentrate pooled liquidity or locked collateral in one set of contracts (a standing honeypot), and safety depends on an external validator set, multisig, or MPC committee. The biggest losses (Ronin $625M, Harmony $100M, Orbit $81M) came from private-key and multisig compromise, not contract bugs, which is why trust-minimized intent and native-verification designs now dominate.

?What is the cheapest way to bridge from Ethereum to Arbitrum or Base?

Across Protocol is typically cheapest and fastest because its relayer-fronting intent model often settles in seconds for a few basis points plus destination gas. For the lowest-trust route, the canonical Arbitrum or Base bridge works but withdrawals back to Ethereum enforce a 7-day optimistic challenge window. Aggregators like Jumper compare both so you see the real cost before confirming.

?What is native USDC and how is CCTP different from a normal bridge?

Circle’s Cross-Chain Transfer Protocol (CCTP) burns native USDC on the source chain and mints native USDC on the destination, with no wrapped USDC, no liquidity pool, and no depeg risk. CCTP V2 (live since March 2025) covers 13+ chains plus Solana with roughly 30-second finality. Bridges like Across, Wormhole, and Squid route through CCTP, which is the safest way to move stablecoins cross-chain in 2026.

?Are wrapped tokens like wBTC and wormhole-wETH safe?

A wrapped token is only worth its backing. If the bridge that mints it is exploited or loses collateral, the IOU can depeg or become worthless, exactly what threatened wormhole-wETH during the 2022 $325M hack before Jump Crypto backstopped it. For large or long-term holdings, prefer native-asset bridges (Chainflip, Circle CCTP, or the canonical rollup bridge). For short transfers the risk window is smaller but never zero.

?How do I avoid getting scammed when bridging?

Five rules: reach the bridge only from its official site or docs, never a search ad; avoid brand-new unaudited bridges holding pooled funds; prefer native-asset routes (CCTP, Chainflip, canonical) for large sums; triple-check source chain, destination chain, and address before confirming because bridging is irreversible; and approve exact token amounts, not unlimited allowances (the July 2024 LI.FI exploit drained users with stale unlimited approvals).

4 honorable mentions + use the canonical bridge.

Strong niche bridges, plus a reminder that the official chain bridge is the lowest-trust option when you can wait.

Use the canonical bridge for long-term holdings

The official Arbitrum, Optimism, and Base bridges are part of each chain’s own security model, the lowest-trust way to move between L1 and an L2. The catch is withdrawals back to Ethereum enforce a 7-day optimistic challenge window (zkSync’s ZK-rollup withdrawals wait for a validity proof, only minutes to hours). Third-party bridges exist mainly to skip that wait by fronting L1 liquidity. That’s convenient, but you take on their trust model. For funds you’ll hold long-term on a chain, the canonical bridge is the safest deposit route. Find the real URL from the chain’s official docs, never a search ad.

// EDITORIAL METHODOLOGY

Every bridge was tested with real transfers in May 2026. Volume and TVL figures cross-checked against DefiLlama. Security models verified against each protocol’s official docs. The hack ledger is sourced from Elliptic, Chainalysis, TRM Labs, Immunefi, Halborn, and CertiK post-mortems. Affiliate links pay CoinCodeCap a referral commission but do not affect ranking. Hop and Axelar have no affiliate program and are ranked on pure merit.

This is research, not financial advice. Bridging carries smart-contract, validator, and wrapped-asset risk. Bridges have lost over $2.8B since 2022. Reach every bridge from its official site, verify both chains and the address, approve exact amounts, and send a small test transfer first.

// LAST UPDATED

May 30, 2026 · v1.0
Next refresh: Q3 2026
Spot a factual error? [email protected]

Share IT
Yash Kamal Chaturvedi
Yash Kamal Chaturvedi

Btech Computer Science, Maharshi Dayanand University, Rohtak (2023)

Get Daily Updates

Crypto News, NFTs and Market Updates

Can’t find what you’re looking for? Type below and hit enter!