Cross-chain bridges took roughly half of on-chain losses — five-bridge head-to-head (with X Layer)
Of all on-chain losses by category, bridges alone account for close to half. Wormhole $326M, Ronin $625M, Nomad $190M, Multichain $126M — those numbers aren't abstract; they say the bridge stack is the most fragile part of the entire crypto ecosystem. We walk the three mechanisms, then bridge 1 USDC across five real bridges and tell you what we'd actually pick.
⚠ Educational content only — not financial / investment / legal / tax advice. On-chain operations are irreversible; perpetuals and leverage can cause 100% principal loss. Full disclosure → disclaimer.
2022–2025 bridge attack timeline
2022–2025 cumulative losses cross $2.5B and remain about 40–50% of total on-chain losses. Conclusion: bridges are necessary, but never park large amounts in "bridge-transit state".
The three bridge mechanisms
Type 1 · Lock-Mint
Earliest bridge design. Lock ETH on chain A, the bridge tells chain B's contract "mint equivalent wETH on B for the user". To go back, burn the B-side wETH and the bridge unlocks A-side ETH. Risk: the locked A-side ETH backs all the B-side wETH. Compromise the bridge contract or the validator system, and B-side wETH can be minted arbitrarily while A-side ETH leaves. Holders of wETH are left with nothing. Wormhole. Multichain. Not recommended in 2026.
Type 2 · Liquidity Pool
Bridges maintain real native-token pools on both chains. Your 1 USDC enters A's pool; B's pool pays out 1 USDC to your destination address. No minting authority, no infinite-mint risk. Bridge compromise caps loss at "pool inventory". Across, Stargate, Hop, Synapse. Recommended in 2026.
Type 3 · Native rollup bridge
L2 official bridges (Arbitrum, Optimism, Base, Polygon PoS, X Layer). Security = L2 protocol itself. Withdrawal back to mainnet: 7-day challenge period (OP/Arb/Base) or hours-to-a-day (ZK rollups). Safest but slow.
Five major bridges
Across Protocol
UMA-team product. Cheapest EVM liquidity bridge in 2026. Relayer network advances funds; UMA Optimistic Oracle settles after the fact. Speed: 30 seconds L2-to-L2. Fees 0.04%-0.1%. Editorial top pick for EVM L2-to-L2.
Stargate (LayerZero)
LayerZero-based unified liquidity. 50+ chains including EVM and non-EVM. "Bus Mode" (cheap slow) + "Taxi Mode" (expensive fast). Top pick for non-EVM destinations (Aptos / Sui / Solana).
Hop Protocol
L2-focused, established. Bonder nodes pre-fund destination, settle after source finalizes. Fast L2-to-L2 (2–3 min). Smaller chain coverage than the others.
Synapse
Liquidity + LayerZero hybrid. ~25 chains. Built-in cross-chain swap. UI is busy — easy to pick a wrong path. Fees higher than Across.
OKX in-wallet bridge
Aggregates LayerZero / Wormhole / liquidity paths. Withdrawing from the OKX exchange to L2 networks bypasses the third-party bridge entirely — that's essentially an internal-ledger transfer, very fast and cheap. No OKX account? Referral signup here (OK18866).
X Layer briefly
OKX-launched ZK Rollup, Polygon CDK, mainnet 2024-04. Key traits:
- Native OKX exchange integration — withdraw directly via the "X Layer" network option; essentially internal-ledger, very fast.
- OKB as gas token (not ETH).
- ZK Rollup → withdrawal to ETH mainnet in hours, not 7 days.
- Ecosystem: ~30 DeFi protocols, ~$1–1.5B TVL (mid-2026). Smaller than Arbitrum / Base by an order of magnitude, but adequate for "OKX-user dedicated L2" positioning.
Use it for OKX-to-on-chain bridging, small experiments, dApp evaluation. Don't park large long-term LP there; the depth isn't yet there.
Five-bridge head-to-head
Tested 2026-05-13. Each bridge: 1 USDC, Arbitrum One → Base.
| Bridge | Fee (USDC) | Speed | UX | Notes |
|---|---|---|---|---|
| Across | $0.04 + $0.05 gas | 31s | 9.0 | Fastest, cheapest, minimal UI |
| Stargate (Taxi) | $0.06 + $0.07 gas | 1m 12s | 8.5 | Wide chain coverage; Bus mode is cheaper but slower |
| Hop | $0.07 + $0.05 gas | 2m 18s | 8.0 | Transparent pricing, declining activity |
| Synapse | $0.09 + $0.06 gas | 1m 45s | 7.0 | Many path options confuse new users |
| OKX bridge | $0.03 + $0.05 gas | 42s | 8.8 | Auto-selects via LayerZero / aggregators |
Use-case decision tree
Hands-on: 1 USDC across five bridges
Timestamps:
- 10:08 · Across: connect wallet → 1 USDC → approve ($0.04 gas) → deposit → 10:08:31 credited on Base ($0.04 bridge fee). 31s.
- 10:22 · Stargate Taxi: Taxi mode (fast) → 10:23:34 credited. 1m 12s. We also tested Bus mode: 12m 18s, ~40% cheaper.
- 10:48 · Hop: deposit → 10:50:18 credited. 2m 18s.
- 11:10 · Synapse: many path choices; default route worked → 11:11:45 credited. 1m 45s. UI was the most cluttered.
- 11:30 · OKX bridge: enter 1 USDC → auto-selected LayerZero → 11:30:42 credited. 42s.
- 11:50 · OKX exchange direct withdrawal (control): 1 USDC OKX → Base network → 11:51:08 credited. 68s (mostly platform risk-check time).
Total spend: 5 bridge fees + gas + 5 approves = $1.65. Plus control + cleanup = $2.35 total cost on $5 throughput.
Five common bridge mistakes
1. Bridging then realizing you have no gas token on the destination
Bridge 100 USDC from Arbitrum to BNB Chain, no BNB for gas → USDC is stuck. Bridge a small amount of gas token alongside, or pick a bridge with built-in gas drop.
2. Getting USDC.e instead of native USDC
Some L2s have legacy lock-mint USDC versions (USDC.e) that aren't accepted in every dApp. Pick "native USDC" in the bridge UI and verify the destination contract matches Circle's official deployment.
3. Double-depositing
UI lags, you think nothing happened, you re-deposit — both went through. Wait for "pending" to clear before clicking again.
4. Operating on a look-alike URL
Across is across.to, not across.fi. Stargate is stargate.finance. Bookmark and use the bookmark.
5. Expecting "instant" on large amounts
"Instant" assumes small amounts and adequate destination liquidity. Large transfers auto-route to slower tiers. Plan a 30-minute window for large bridges; don't panic.
FAQ
Why are bridges so hackable?
Every bridge has a central ledger — a multi-sig set, a smart contract, or an off-chain system. Compromise any one and the attacker can mint or release mirrored tokens fraudulently.
When I bridge USDC, do I get real USDC at the destination?
With Circle CCTP or major liquidity bridges, yes. With legacy lock-mint bridges, you may get USDC.e/aUSDC mirror tokens. Use the former.
What is X Layer and is it worth using?
OKX's ZK Rollup L2. Native exchange integration, OKB as gas, smaller ecosystem (~30 DeFi protocols). Good for small on-chain practice, not yet ideal for large long-term LP.
How long does a bridge take?
L2-to-L2 via liquidity bridge: 30s-2m. EVM mainnet via LayerZero: 1-5m. L2 to mainnet via official bridge: 7 days (OP/Arb/Base) or hours-to-1-day (ZK).
Where does the money go if a bridge fails?
Source-side failure: nothing moved, lost gas. Destination not credited: usually auto-refunds within 24h, or recoverable via the bridge's Refund/Retry UI. Test with a small amount first.
Sources
- Chainalysis Crypto Crime Report · chainalysis.com/reports
- Circle CCTP · circle.com
- Across docs · docs.across.to
- LayerZero / Stargate · layerzero.network
- X Layer docs · okx.com/xlayer
- SlowMist bridge incident archive · slowmist.com