The 12 best crypto bridges to move tokens across chains, ranked by security — not hype
Bridges are the most-hacked thing in crypto: over $2.8B stolen since 2022. We ranked 12 by the only metric that matters first (whether your funds sit in a honeypot), then by chains, fees and speed. Intent-based and native-verification bridges win, and we disclose every major hack in full.
/go/ links. Use one and we may earn a commission — at no extra cost to you. Security record is the #1 ranking factor; payouts never move the order. Bridges have lost over $2.8B since 2022 — reach every bridge from its official site and send a small test transfer first.A bridge moves tokens from one blockchain to another, but the way it does that decides whether your money is safe. The catch that most ranking guides skip is the honeypot: a bridge that pools real liquidity or locks collateral behind a multisig concentrates value in one set of contracts, and that standing pile is exactly what attackers drain.
So we ranked the twelve bridges that matter by security first (no honeypot, clean hack record), then by chains, real cost and speed. We also document every major bridge hack since 2022 in full, because the $2.8B graveyard is the whole reason the rankings look the way they do. Use the mechanism guide to understand the risk, the cost estimator to price a real transfer, and the reviews for the honest weak spots.
How we ranked them — security first, hype never
Five criteria, weighted toward not losing your money. No paid placements; affiliate links never move the order.
No honeypot
Does the bridge hold pooled liquidity or locked collateral behind a multisig? Intent and native-verification designs that hold nothing rank highest.
Hack record
Clean history, or a hack that was fully reimbursed and hardened. Zero tolerance for repeat incidents or opaque recoveries.
Chains + assets
How many chains, and whether it reaches non-EVM (Solana, Bitcoin, Cosmos) — not just the easy EVM L2s.
Real cost + speed
All-in fee (bridge + gas), whether destination gas is covered, and the actual settlement time we measured.
Audits + transparency
Recent third-party audits, public team, open-source contracts. Anonymous teams holding pooled funds get marked down.
How we test
Every bridge moved real funds in May 2026. Volume and TVL cross-checked against DefiLlama; security models verified against each protocol’s docs.
How bridges actually work — 4 mechanisms, plain English
The mechanism decides the risk. Understand these four and you’ll never pick a dangerous bridge by accident.
01Lock-and-mint (wrapped)
Your token is locked on the source chain; a wrapped IOU (wETH, axlUSDC) is minted on the destination. The locked pool is a honeypot. Compromise the mint authority and attackers print unbacked tokens. This caused Wormhole ($325M) and BSC Token Hub ($570M).
02Liquidity-pool
Pools of the real asset sit on each chain. You deposit on A, withdraw from B’s pool. No wrapping, but the pooled liquidity is still a large attack target and you can hit slippage on thin pools.
03Intent / solver-based
You sign an intent (“I want 100 USDC on Base”). Independent solvers front the output from their own inventory and get reimbursed after on-chain verification. No protocol-held pool to drain. Your funds are only ever in your wallet or settled peer-to-peer.
04Native verification / ZK
The destination chain cryptographically verifies the source chain’s state itself — via a light client, validity ZK proof, or its own validator set — instead of trusting an external committee. This removes the multisig trust assumption behind most bridge hacks.
What a bridge transfer actually costs
Enter the amount you’re moving and pick a route — we’ll estimate the all-in protocol fee each bridge charges, sorted cheapest first. The L2-only bridges drop out when you choose a Solana route.
Price one bridge transfer, per protocol
All 12 bridges compared
Mechanism, chains, speed, hack history and our score in one table. Tap a column heading to sort — by rank, mechanism or score.
| Bridge ▲ | Mechanism | Chains | Speed | Hacked? | Score ▼ |
|---|
All 12 bridges, reviewed in depth
/go/ links. Security record is the #1 ranking factor, and payouts do not move the order. Across, deBridge and Chainflip top the list because they avoid the pooled-liquidity honeypot, not because of commissions. We rank decentralized protocols with no affiliate program — Hop, Axelar — on pure merit alongside the rest.
The bridge hack ledger — $2.8B+ stolen since 2022
Bridges are the single most-exploited category in crypto, roughly 40% of all DeFi exploit losses. A bridge concentrates pooled liquidity or locked collateral in one set of contracts (a standing honeypot), and its safety rests on an external validator set, multisig or MPC committee. Compromise the keys or forge a proof and the whole pool drains at once.
5 red flags that get people rekt bridging
Most bridge losses are avoidable. These five cause the majority — and none of them are exotic.
Phishing fake-bridge sites
The #1 way people lose funds. Fake “Across”, “Orbiter”, “Synapse” domains abound. Reach the bridge only from its official site or docs — never a search ad. Celer’s 2022 DNS hijack drained users through a spoofed UI.
Unlimited token allowances
Approving an “unlimited” allowance means a future bug can drain that token — exactly how the July 2024 LI.FI exploit hit users. Approve exact amounts; revoke stale approvals.
Wrapped-asset depeg risk
A wrapped token is only worth its backing. If the bridge is exploited, the IOU can crater. Prefer native-asset bridges (Chainflip, CCTP, canonical) for large sums.
Wrong chain / wrong address
Bridging is irreversible. Sending to an exchange deposit address that doesn’t support the destination chain, or fat-fingering a chain, can lose funds forever. Triple-check both chains and the address.
Brand-new unaudited bridges
A brand-new bridge with pooled liquidity and no audit track record is the worst place to leave value mid-transfer. Check for recent third-party audits and a clean exploit history before you trust it with anything meaningful.
Your first bridge transfer, in 5 steps
Using Across to move USDC from Ethereum to Base as the worked example.
Reach the real site
Type the official URL or use a bookmark. Never click a search ad or a link from DMs. Verify the domain character-by-character — this single step prevents the most common loss.
Connect + set the route
Connect your wallet. Set source = Ethereum, destination = Base, asset = USDC. Across quotes the fee and estimated time. Confirm the destination chain is exactly what you intend.
Approve the exact amount
When prompted for the token approval, set it to the exact amount you’re bridging — not unlimited. This caps your exposure if the contract is ever compromised.
Confirm + wait
Sign the transfer. A relayer fronts your USDC on Base, usually within a minute. Keep the transaction hash; you can track settlement on the Across explorer.
Verify on the destination
Switch your wallet to Base and confirm the native USDC arrived. For a first transfer, send a small test amount before moving a large sum.
Skip the rankings — find your row
Pick by what you’re actually trying to do.
4 honorable mentions + the canonical bridge
Strong niche bridges, plus a reminder that the official chain bridge is the lowest-trust option when you can wait.
Mayan Finance
Auction-based cross-chain swaps settling on Solana, built on Wormhole. “Drivers” compete on-chain to fill at the best rate; Mayan Swift delivers sub-second swaps.
Visit Mayan ↗Rango Exchange
Super-aggregator scanning 120+ liquidity sources across 70+ blockchains for the cheapest multi-step route, including newly minted tokens.
Visit Rango ↗Rhino.fi
L2-focused liquidity layer on StarkEx with gas-efficient stablecoin bridging across 35+ networks, including ZK-rollups (Starknet, Taiko).
Visit Rhino.fi ↗Owlto Finance
Budget L2 bridge emphasizing low fees (~0.1%) and fast 1–5 minute transfers across 20+ networks. The cheap option for routine L2-to-L2 hops.
Visit Owlto ↗Use the canonical bridge for long-term holdings
The official Arbitrum, Optimism and Base bridges are part of each chain’s own security model — the lowest-trust way to move between L1 and an L2. The catch: withdrawals back to Ethereum enforce a 7-day optimistic challenge window (ZK-rollups wait only minutes to hours for a validity proof). Third-party bridges exist mainly to skip that wait by fronting L1 liquidity. That’s convenient, but you take on their trust model. For funds you’ll hold long-term on a chain, the canonical bridge is the safest deposit route. Find the real URL from the chain’s official docs, never a search ad.
Frequently asked
What is a crypto bridge and how does it work?
Which crypto bridge is the safest in 2026?
Why are crypto bridges hacked so often?
What is the cheapest way to bridge from Ethereum to Arbitrum or Base?
What is native USDC, and how is CCTP different from a normal bridge?
Are wrapped tokens like wBTC and wormhole-wETH safe?
How do I avoid getting scammed when bridging?
Crypto research from people who actually use the products.
One email a week: what we tested, what we’d avoid, and the numbers behind the headlines. No hype, no paid placements in the editorial. 40,000+ readers.
