The 12 best crypto bridges to move tokens across chains, ranked by security, not hype.
Bridges are the most-hacked thing in crypto: over $2.8B stolen since 2022. We ranked 12 bridges by the only metric that matters first, whether your funds sit in a honeypot, then by chains, fees, and speed. Intent-based and native-verification bridges win. We also disclose every major bridge hack in full.
See the 12 bridges →How we ranked them. Security first, hype never.
Five criteria, weighted toward not losing your money.
No honeypot
Does the bridge hold pooled liquidity or locked collateral behind a multisig? Intent and native-verification designs that hold nothing rank highest.
Hack record
Clean history, or a hack that was fully reimbursed and hardened. Zero tolerance for repeat incidents or opaque recoveries.
Chains + assets
How many chains, and whether it reaches non-EVM (Solana, Bitcoin, Cosmos), not just the easy EVM L2s.
Real cost + speed
All-in fee (bridge + gas), whether destination gas is covered, and actual settlement time we measured.
Audits + transparency
Recent third-party audits, public team, open-source contracts. Anonymous teams holding pooled funds get marked down.
The podium. Top 3 at a glance.
1. Across
Cheapest and fastest for Ethereum↔L2. Relayers front your funds; no pooled honeypot. $28B+ volume, zero hacks, UMA optimistic bonds.
Read review →2. deBridge
Fastest EVM↔Solana↔Tron settlement, 15–90 seconds. No wrapped assets, nothing to drain. Best for Solana flows.
Read review →3. Chainflip
Truly native BTC↔ETH↔SOL. No wrapped tokens, no depeg risk. The pick for moving real Bitcoin in and out of DeFi.
Read review →How bridges actually work. 4 mechanisms, plain English.
The mechanism decides the risk. Understand these four and you’ll never pick a dangerous bridge by accident.
1. Lock-and-mint (wrapped)
Your token is locked on the source chain; a wrapped IOU (wETH, axlUSDC) is minted on the destination. Redeeming burns the wrapper and unlocks the original. The locked pool is a honeypot: compromise the mint authority and attackers print unbacked tokens. This model caused Wormhole ($325M) and BSC Token Hub ($570M). Used by Portal, Celer xAsset, Polygon PoS.
2. Liquidity-pool
Pools of the real asset sit on each chain. You deposit on A, withdraw from B’s pool. No wrapping, but the pooled liquidity is still a large attack target and you can hit slippage on thin pools. Used by Stargate, Synapse, Hop, Celer xLiquidity.
3. Intent / solver-based
You sign an intent (“I want 100 USDC on Base”). Independent solvers front the output from their own inventory and get reimbursed after on-chain verification. There’s no protocol-held pool to drain, and your funds are only ever in your wallet or settled peer-to-peer. Faster and safer. Used by Across, deBridge, Mayan.
4. Native verification / ZK
The destination chain cryptographically verifies the source chain’s state itself (via a light client, validity ZK proof, or its own validator set) instead of trusting an external committee. This removes the multisig trust assumption behind most bridge hacks. Examples: canonical rollup bridges, Circle CCTP burn-and-mint, Chainflip’s native swaps, ZK light-client designs.
The 12 bridges compared. Side-by-side.
Every way to bridge tokens between blockchains, compared side by side: mechanism, chains, speed, hack history, and best use.
| # | Bridge | Mechanism | Chains | Speed | Hacked? | Try |
|---|---|---|---|---|---|---|
| 1 | Across | Intent | 15+ | ~1–4 min | Never | Try → |
| 2 | deBridge | Intent | 26+ | 15–90 s | Never | Try → |
| 3 | Chainflip | Native swap | BTC/ETH/SOL+ | 2–5 min | Never | Try → |
| 4 | Jumper | Aggregator | 30+ | Varies | LI.FI $10M ’24 | Try → |
| 5 | Stargate | Liquidity pool | 80+ | Seconds | No pool drain | Try → |
| 6 | Axelar | PoS network | 60+ | 1–3 min | Never | Try → |
| 7 | Squid | Aggregator | 100+ | <20 s | Never | Try → |
| 8 | Hop | Liquidity pool | 6 L2s | <1 min | Never | Try → |
| 9 | Synapse | Pool + optimistic | 20+ | Minutes | Pool honeypot | Try → |
| 10 | Celer cBridge | Pool + canonical | 40+ | Sec–min | DNS hijack ’22 | Try → |
| 11 | Orbiter | Maker model | 19+ | 10–20 s | Phishing magnet | Try → |
| 12 | Wormhole | Lock-and-mint | 30+ | Sec–min | $325M ’22 | Try → |
Volume/TVL figures from DefiLlama, May 2026 snapshot. “Hacked?” reflects protocol-level incidents; front-end/phishing and integration hacks noted separately. Sources in each review below.
All 12 bridges, reviewed in depth.
Mechanism, real fees, security model, and hack history for each. Tested with real transfers May 2026.
Some bridges below pay CoinCodeCap a referral commission via our /go/ links. Security record is the #1 ranking factor, and payouts do not move the order. Across, deBridge, and Chainflip top the list because they avoid the pooled-liquidity honeypot, not because of commissions.
Using a /go/ link costs you nothing extra. We rank decentralized protocols with no affiliate program (Hop, Axelar) on pure merit alongside the rest.
1. Across Protocol ★ Editor’s pick
+ What worked
The cheapest and fastest way to move from Ethereum to Arbitrum, Base, or Optimism. Relayers front your funds on the destination instantly, then get reimbursed from the source pool after UMA’s Optimistic Oracle validates the fill, so there’s no wrapped-asset honeypot mid-transfer. Gas-on-destination is native to the model: the solver delivers the exact output token. UMA bonds plus a 48-hour upgrade timelock secure it. Audited by OpenZeppelin (May 2025) and Trail of Bits. Solana bridging added August 2025. $28B+ bridged, zero exploits.
− What didn’t
Focused on high-liquidity blue-chip assets, not the long tail of obscure tokens. Fewer exotic chains than Wormhole or Squid. The optimistic settlement adds a short delay versus pure pooled bridges, though relayers usually hide it.
Pool honeypot: None (relayers front)
Chains: ETH, ARB, OP, Base, Solana +
USDC: Native via CCTP
Best for: ETH → L2, cheapest + safest
2. deBridge ★ Best for Solana
+ What worked
The fastest EVM↔Solana↔Tron transfers we tested, with a ~30-second median for EVM-to-EVM. Professional market-maker solvers fill orders peer-to-peer through the DLN. There’s zero pooled or locked liquidity, so literally no honeypot to drain. Assets are never wrapped. Strong Solana coverage makes it our pick for cross-ecosystem flows. Audited by Halborn including the December 2024 DLN/Solana contracts. No protocol exploit to date.
− What didn’t
A flat fee component makes sub-$500 transfers relatively pricier per dollar moved. The solver network needs liquidity for your specific route, so exotic pairs occasionally wait longer for a filler. Newer DBR token with thinner liquidity than ACX or STG.
Pool honeypot: None
Median speed: ~30 s EVM↔EVM
Solana: First-class
Best for: Solana ↔ EVM, speed
3. Chainflip ★ Native BTC
+ What worked
The only bridge here that moves truly native assets (real BTC, real ETH, real SOL) with no wrapped tokens, no bridges in the traditional sense, and no pooled honeypot. A Just-in-Time AMM supplies liquidity only at swap time; 150 validators control threshold-signature vaults backed by FLIP staking and slashing. Because outputs are native L1 assets, there is zero wrapped-asset depeg risk. Record $1.69B swap volume in Q4 2025. No exploit to date.
− What didn’t
Native Bitcoin swaps take ~30–40 minutes because Chainflip waits for 3-block confirmation for security. That’s slower than wrapped-BTC shortcuts, but far safer. Fewer total chains than aggregators. The JIT AMM can show wider spreads on thin pairs.
Wrapped: None, no depeg risk
Vaults: 150-validator threshold sig
BTC swap: ~30–40 min (secure)
Best for: Native Bitcoin in/out of DeFi
4. Jumper Exchange ★ Best aggregator
+ What worked
The “route me the best way” front-end. It queries 18+ bridges and 32+ DEXs and stitches the optimal source-swap → bridge → destination-swap into one approved flow. It doesn’t bridge itself or take custody. It inherits whichever bridge it routes through, so it adds smart routing, not new risk. Charges no fee of its own. The single best starting point if you don’t know which bridge to pick.
− What didn’t
LI.FI’s core contracts suffered a ~$10M exploit in July 2024 that hit users holding stale unlimited approvals to an old contract. It’s since been patched, but it’s a reminder to approve exact amounts. You inherit the risk of whichever underlying bridge it selects, so check the route before confirming.
Own custody: None
Own fee: Zero
2024 note: LI.FI $10M approval exploit
Best for: “Pick the best route for me”
5. Stargate Finance
+ What worked
The deepest unified-liquidity stablecoin routing across the most chains, 80+ via LayerZero. Native asset transfers with instant guaranteed finality through shared pools that rebalance via its delta algorithm, so no wrapping. $70B+ cumulative volume puts it among the highest-volume bridges. No Stargate-pool drain to date. LayerZero v2 messaging underpins it.
− What didn’t
Pooled liquidity is a larger attack surface than the intent bridges above, and security ultimately rests on LayerZero’s configurable verifier setup. The August 2025 LayerZero Foundation buyout converting STG to ZRO muddied the token story, so confirm current status before holding STG.
Chains: 80+
Finality: Instant guaranteed
Messaging: LayerZero v2
Best for: High-volume stablecoins, many chains
6. Axelar
+ What worked
Programmable cross-chain messaging secured by a real proof-of-stake validator set. Roughly 75 validators stake AXL and jointly control gateways via threshold signatures, so no single node can move funds. That is a far stronger trust model than the small multisigs behind the biggest hacks. Fully open-source, no custodial components, slashing for misbehavior. General Message Passing lets apps build true cross-chain logic. Powers Squid Router.
− What didn’t
More of a developer/app interop layer than a slick consumer UI, so most people will use it indirectly through Squid. axlUSDC and other Axelar-wrapped assets are still wrapped representations, so they carry the usual wrapped-asset caveat for large holdings.
Gateways: Threshold signatures
Use: General Message Passing
Powers: Squid Router
Best for: Developers, secure messaging
7. Squid Router ★ Most chains
+ What worked
The widest reach of any single-click router: 100+ chains and 20,000+ tokens spanning EVM, Solana, Cosmos, Sui, XRPL, Stellar, Hedera, and Celo. It combines Axelar, Circle CCTP, IBC, Chainflip, and LayerZero and can do source-swap → bridge → destination-swap in one transaction. Sub-20-second swaps on fast routes. Inherits Axelar’s PoS security plus whichever protocol it hops through.
− What didn’t
Reaching exotic chains means inheriting the risk of less-proven underlying bridges on those routes. The breadth can overwhelm new users. (Note: the “SQUID” Squid Game memecoin rug of 2021 is an unrelated project; don’t confuse the two.)
Combines: Axelar, CCTP, Chainflip, LZ
One tx: Swap → bridge → swap
Security: Axelar PoS + route
Best for: Reaching obscure chains/tokens
8. Hop Protocol
+ What worked
Purpose-built for cheap, fast L2-to-L2 hops between Arbitrum, Optimism, Polygon, Gnosis, and Base. “Bonders” front liquidity on the destination and get reimbursed when the transfer settles via L1, with a 24-hour challenge window and watchers who earn 7.5% of a fraudulent transfer root. Bonder fees ran around $0.10 in 2025, very cheap for L2 hops. Open-source contracts, no major exploit, fully community-governed via Hop DAO.
− What didn’t
L2-centric and limited to a handful of chains, with no Solana or non-EVM reach. Pooled AMM liquidity carries the usual honeypot caveat, and the optimistic model means watchers must stay honest. No affiliate program, ranked purely on merit.
Chains: ARB/OP/Polygon/Gnosis/Base
Fee: ~$0.10 + slippage
Challenge: 24h optimistic window
Best for: Arbitrum ↔ Optimism, cheap
9. Synapse Protocol
+ What worked
A mature cross-chain stableswap with deep multi-chain reach across 20+ networks and $12B+ cumulative volume from 2M+ users. The stableswap AMM gives clean stablecoin routing, and the team is building Synapse Chain (an optimistic rollup) for cross-chain execution. Solid choice if you specifically want AMM-based stablecoin routing.
− What didn’t
It combines two attack surfaces: pooled AMM liquidity (a standing honeypot) plus optimistic messaging that depends on off-chain guards challenging bad messages in time. That’s a heavier trust stack than the intent bridges above. It ranks below them for that reason despite its maturity.
Volume: $12B+ · 2M+ users
Building: Synapse Chain (rollup)
Risk: Pool + challenge window
Best for: AMM stablecoin routing
10. Celer cBridge
+ What worked
Wide coverage across 40+ chains with two modes: xLiquidity (pooled transfers) and xAsset (canonical lock-and-mint), routed by the State Guardian Network, a Tendermint PoS chain with CELR staking and slashing. $14B+ cumulative transactions. Flexible if you want both pooled and canonical options in one place.
− What didn’t
In August 2022 Celer suffered a BGP/DNS hijack that drained roughly $240K from users through a spoofed front-end. The contracts were fine, but it’s a stark reminder that the website itself is an attack surface. xLiquidity pooled funds carry the usual honeypot caveat. Always reach cBridge from the official domain.
Secured by: SGN PoS (CELR)
Chains: 40+
2022: DNS-hijack front-end attack
Best for: Flexible multi-chain routing
11. Orbiter Finance
+ What worked
Fast and cheap pure L2-to-L2 transfers via a Maker model: you send to a market maker’s address on the source chain and they deliver on the destination, backed by MDC margin contracts and ZK-SPV on-chain arbitration. Typical transfers settle in 10–20 seconds at ~0.1–0.3%, with very low gas. Expanding from 19 core networks toward 70+.
− What didn’t
A smaller, newer trust model than the PoS networks, and the brand is a heavy phishing target; fake “orbiter-finance” clones are common. The practical risk here is landing on a fake site, not a contract drain. Only reach it from the official domain, and bookmark it.
Speed: 10–20 s
Fee: ~0.1–0.3%
Warning: Phishing-clone magnet
Best for: Quick cheap L2 ↔ L2
12. Wormhole / Portal ⚠ $325M hack
+ What worked
The broadest non-EVM reach of any messaging layer: Solana, Sui, Aptos, Cosmos/IBC, Algorand, NEAR, and 30+ chains in total. It underpins Mayan, Portal, and many app-specific bridges, and now powers CCTP routes too. $65B+ processed by 2026, 29+ audits, and a $225M raise at a $2.5B valuation finalized its split from Jump Crypto. If you need to reach an exotic chain, Wormhole usually can.
− What didn’t
In February 2022 a Solana-side signature-verification flaw let an attacker mint 120,000 unbacked wETH worth $325M, the second-largest hack in bridge history. Jump Crypto fully replaced the funds from reserves. The Portal token bridge is still lock-and-mint behind a 13-of-19 Guardian set, so guardian collusion remains the core trust assumption. Use it for reach, not for parking large wrapped balances.
Trust: 13-of-19 Guardians
Reach: Solana, Sui, Aptos, Cosmos
2022: $325M hack (reimbursed)
Best for: Reaching exotic non-EVM chains
The bridge hack ledger. $2.8B+ stolen since 2022.
Bridges are the single most-exploited category in crypto, roughly 40% of all DeFi exploit losses. A bridge concentrates pooled liquidity or locked collateral in one set of contracts, a standing honeypot, and its safety rests on an external validator set, multisig, or MPC committee. Compromise the keys or forge a proof and the whole pool drains at once. Note that the biggest losses came from private-key and multisig compromise, not contract bugs, which is exactly why intent and native-verification designs now win.
🔴 Ronin Bridge (Axie / Sky Mavis)
$625M · partial recoveryFive of nine validator private keys were compromised via social engineering by the Lazarus Group (DPRK), and the theft went undetected for six days. Sky Mavis reimbursed users via a funding round; over $30M was later seized by law enforcement and OFAC sanctioned the address. The textbook case for why a 5-of-9 multisig is not enough security for $600M. Full Ronin Bridge hack breakdown →
🟢 Poly Network
$611M · fully returnedAn attacker exploited a cross-chain contract function to forge keeper instructions and drained $611M, then returned nearly all of it within about 15 days, dubbing themselves “Mr. White Hat.” The largest hack-and-return in crypto history, but a reminder that the vulnerability was real even if the outcome was benign.
🟡 BSC Token Hub (Binance Bridge)
~$570M minted · mostly frozenThe attacker forged an IAVL Merkle proof for an old block to mint 2M BNB out of thin air. BNB Chain validators halted the entire chain to contain it, freezing most of the minted BNB before it could be extracted. Roughly $110M got out. A lock-and-mint proof-forgery attack on a massive scale.
🟢 Wormhole
$325M · backstopped by JumpA Solana-side signature-verification flaw let the attacker mint 120,000 unbacked wETH. Jump Crypto replaced the entire $325M from its own reserves within days to keep wormhole-wETH solvent, the only reason holders didn’t eat the loss. A vivid lesson in wrapped-asset backing risk. Full Wormhole hack breakdown →
🟡 Nomad Bridge
$190M · ~$22M+ returnedA faulty upgrade set the trusted root to 0x00, which made any message “proven,” so copy-pasting one working transaction with your own address drained funds. A chaotic public mob emptied the bridge in hours. White hats returned $22M+; a key suspect was later extradited to the US. Proof that a single bad config line can be catastrophic. Full Nomad Bridge hack breakdown →
🔴 Multichain (Anyswap)
~$130M · largely unrecoveredAn opaque collapse after CEO Zhaojun’s arrest in China; the team lost access to the MPC node servers and over $130M moved out in a suspected inside job. The protocol shut down and funds were largely never recovered. The cautionary tale for MPC bridges with a centralized operator.
🔴 Harmony Horizon Bridge
$100M · mostly unrecoveredA 2-of-5 multisig was compromised, so an attacker only needed two of five signing keys to move everything. Attributed to the Lazarus Group. Mostly unrecovered. Another data point that small multisigs guarding large pools are the highest-risk design in crypto.
🔴 Orbit Chain (Ozys)
~$81.5M · laundered via TornadoSeven of ten multisig signers were compromised and funds were laundered through Tornado Cash. Largely unrecovered. A 2024 reminder that the multisig-compromise pattern that drove 2022’s losses hadn’t gone away.
🔴 Kelp DAO / LayerZero integration
~$292M · 2026’s largestA forged cross-chain instruction against a LayerZero integration drained roughly 116,500 rsETH, the largest DeFi hack of 2026 so far. Under investigation at the time of writing. Proof that even modern messaging-layer integrations remain a target when integration code is flawed.
Sources: Elliptic, Chainalysis, TRM Labs, Immunefi, Halborn, CertiK, The Block, CoinDesk. Smaller 2026 incidents (IoTeX ioTube ~$4.3M, CrossCurve ~$3M) omitted for length. The “$2.8B+ since 2022” figure is the conservative industry total excluding returned Poly Network funds.
Decision tree. 5 use cases.
Skip the rankings. Find your row.
Across
Relayer-fronted intent, lowest fees, fast. Or the canonical bridge if you can wait for lowest trust.
CCTP route
Circle CCTP V2 via Across, Wormhole, or Squid: burn-and-mint native USDC, no wrapped depeg risk.
deBridge or Mayan
Native, fast intent/auction settlement. Wormhole for the most exotic destinations.
Hop or Orbiter
Purpose-built, cheap, seconds-to-a-minute Arbitrum ↔ Optimism ↔ Base hops.
Jumper or Squid
Aggregators that compare every bridge and pick the optimal route in one click.
5 red flags that get people rekt bridging.
Most bridge losses are avoidable. These five cause the majority.
Phishing fake-bridge sites
The #1 way people lose funds. Fake “Across”, “Orbiter”, “Synapse” domains abound. Reach the bridge only from its official site or docs, never a search ad. Celer’s 2022 DNS hijack drained users through a spoofed UI.
Unlimited token allowances
Approving an “unlimited” allowance to a bridge means a future bug can drain that token. Exactly how the July 2024 LI.FI exploit hit users. Approve exact amounts; revoke stale approvals.
Wrapped-asset depeg risk
A wrapped token is only worth its backing. If the bridge is exploited, the IOU can crater. Prefer native-asset bridges (Chainflip, CCTP, canonical) for large sums.
Wrong chain / wrong address
Bridging is irreversible. Sending to an exchange deposit address that doesn’t support the destination chain, or fat-fingering a chain, can lose funds forever. Triple-check both chains and the address.
Unaudited new bridges
A brand-new bridge with pooled liquidity and no audit track record is the worst place to leave value mid-transfer. Check for recent audits and a clean exploit history first.
Your first bridge transfer, in 5 steps.
Using Across to move USDC from Ethereum to Base as the worked example.
- 01
Reach the real site.
Type the official URL or use a bookmark. Never click a search ad or a link from DMs. Verify the domain character-by-character. This single step prevents the most common loss.
- 02
Connect + set route.
Connect your wallet. Set source = Ethereum, destination = Base, asset = USDC. Across will quote the fee and estimated time. Confirm the destination chain is exactly what you intend.
- 03
Approve the exact amount.
When prompted for the token approval, set it to the exact amount you’re bridging, not unlimited. This caps your exposure if the contract is ever compromised.
- 04
Confirm + wait.
Sign the transfer. A relayer fronts your USDC on Base, usually within a minute. You keep the transaction hash; you can track settlement on the Across explorer.
- 05
Verify on the destination.
Switch your wallet to Base and confirm the native USDC arrived. Add the token contract if it doesn’t auto-display. For a first transfer, send a small test amount before moving a large sum.
7 frequently asked questions.
?What is a crypto bridge and how does it work?
A crypto bridge moves tokens from one blockchain to another. Four mechanisms exist: lock-and-mint (lock the real asset on chain A, mint a wrapped IOU on chain B), liquidity-pool (pools of the real asset on each chain), intent/solver-based (a relayer fronts the output and gets reimbursed after on-chain verification), and native verification (the destination chain cryptographically verifies the source state itself). Intent and native-verification designs are safest because they avoid the pooled-liquidity honeypot that has cost the industry over $2.8B.
?Which crypto bridge is the safest in 2026?
By design, Chainflip (native L1 swaps, zero wrapped assets), Across (intent with UMA bonds, no protocol-held liquidity), and deBridge (solver-based, zero locked liquidity) rank highest because there is no pooled honeypot to drain. Canonical bridges (official Arbitrum, Optimism, Base) are the lowest-trust option for L1-to-L2 if you can wait out the withdrawal window. Lock-and-mint bridges holding pooled liquidity behind a small validator set carry the most risk.
?Why are crypto bridges hacked so often?
Over $2.8B has been stolen from bridges since 2022, roughly 40% of all DeFi exploit losses. Bridges concentrate pooled liquidity or locked collateral in one set of contracts (a standing honeypot), and safety depends on an external validator set, multisig, or MPC committee. The biggest losses (Ronin $625M, Harmony $100M, Orbit $81M) came from private-key and multisig compromise, not contract bugs, which is why trust-minimized intent and native-verification designs now dominate.
?What is the cheapest way to bridge from Ethereum to Arbitrum or Base?
Across Protocol is typically cheapest and fastest because its relayer-fronting intent model often settles in seconds for a few basis points plus destination gas. For the lowest-trust route, the canonical Arbitrum or Base bridge works but withdrawals back to Ethereum enforce a 7-day optimistic challenge window. Aggregators like Jumper compare both so you see the real cost before confirming.
?What is native USDC and how is CCTP different from a normal bridge?
Circle’s Cross-Chain Transfer Protocol (CCTP) burns native USDC on the source chain and mints native USDC on the destination, with no wrapped USDC, no liquidity pool, and no depeg risk. CCTP V2 (live since March 2025) covers 13+ chains plus Solana with roughly 30-second finality. Bridges like Across, Wormhole, and Squid route through CCTP, which is the safest way to move stablecoins cross-chain in 2026.
?Are wrapped tokens like wBTC and wormhole-wETH safe?
A wrapped token is only worth its backing. If the bridge that mints it is exploited or loses collateral, the IOU can depeg or become worthless, exactly what threatened wormhole-wETH during the 2022 $325M hack before Jump Crypto backstopped it. For large or long-term holdings, prefer native-asset bridges (Chainflip, Circle CCTP, or the canonical rollup bridge). For short transfers the risk window is smaller but never zero.
?How do I avoid getting scammed when bridging?
Five rules: reach the bridge only from its official site or docs, never a search ad; avoid brand-new unaudited bridges holding pooled funds; prefer native-asset routes (CCTP, Chainflip, canonical) for large sums; triple-check source chain, destination chain, and address before confirming because bridging is irreversible; and approve exact token amounts, not unlimited allowances (the July 2024 LI.FI exploit drained users with stale unlimited approvals).
4 honorable mentions + use the canonical bridge.
Strong niche bridges, plus a reminder that the official chain bridge is the lowest-trust option when you can wait.
Use the canonical bridge for long-term holdings
The official Arbitrum, Optimism, and Base bridges are part of each chain’s own security model, the lowest-trust way to move between L1 and an L2. The catch is withdrawals back to Ethereum enforce a 7-day optimistic challenge window (zkSync’s ZK-rollup withdrawals wait for a validity proof, only minutes to hours). Third-party bridges exist mainly to skip that wait by fronting L1 liquidity. That’s convenient, but you take on their trust model. For funds you’ll hold long-term on a chain, the canonical bridge is the safest deposit route. Find the real URL from the chain’s official docs, never a search ad.







