Cross-chain bridges have been a lucrative target in crypto. In April 2026, Kelp DAO’s LayerZero-powered bridge was hacked for $292 million in rsETH. This begs the question of what the right bridge really entails. This guide breaks down the cross-chain options worth using in 2026, what each actually does under the hood, and how to choose without becoming the next headline.
Quick Glance Summary Table
| Bridge | Type | Best for | Audit/security model | Native or wrapped output |
| ChangeNOW | Instant-swap aggregator | Fast retail swaps, no custody risk | Partner integrations, no bridge TVL | Native (direct swaps) |
| Across | Liquidity bridge | Low-fee transfers, audited reliability | Audited by OpenZeppelin, solver model | Native assets |
| Stargate | Liquidity bridge (LayerZero) | Wide chain coverage, composable DeFi | LayerZero audits, security council | Native assets |
| Squid | Cross-chain swap composer | Complex swap routing, 100+ chains | Axelar audits, backed by Polychain | Native assets |
| Wormhole | Lock-and-mint/message passing | Broad chain connectivity, developer use | Multiple audits, exploit history | Wrapped tokens |
| deBridge | Liquidity bridge (0-TVL model) | Secure transfers | 26 audits, solver-based architecture | Native assets |
What Does “Cross-Chain” Actually Mean?
Cross-chain is the ability to move assets across different blockchains. It is the act of moving value across two incompatible networks. Picture moving money between banks that don’t share systems. A cross-chain-enabled platform or exchange allows users to swap one cryptocurrency for another across different blockchains. E.g, swapping ETH on Arbitrum for USDT on Binance Smart Chain (BSC).
Cross-chain is different from multi-chain. Multi-chain means an application is deployed across multiple blockchains, with no token movement; in cross-chain, assets/messages are actually moving.
The Three Types of Cross-Chain Solutions
Lock-and-mint / message-passing bridges
Lock-and-mint bridges use a contract that locks tokens on Chain A and mints a wrapped version of the token on Chain B. Wrapped tokens can be redeemed on the source chain and retain a 1:1 ratio. Examples of lock-and-mint bridges are Wormhole, LayerZero, and Axelar. A good swap example is WETH, a wrapped ERC-20 version of ETH.
Liquidity-network bridges
Liquidity pools hold assets on both networks. You deposit on Chain A and are instantly paid out on Chain B, at a fee. No wrapped tokens. Liquidity network bridges are Across, Stargate, Hop, Synapse, and deBridge
Instant-swap alternatives
No bridging—your swap is routed across chains using aggregators, like trading ETH on one chain for USDC on another. Examples of these aggregators are ChangeNOW and Rango. You send assets in chain A, you get native assets on chain B, no wrapping.
What to Look For in a Cross-Chain Bridge in 2026
Trust model and attack surface
The three cross-chain mechanisms have different risk types.
A lock-and-mint bridge is prone to smart contract exploits. If the contract holding tokens in chain A is hacked, locked funds can be drained, and the wrapped version cannot be redeemed. An instant swap without a bridge contract has the smallest contract risk surface.
Liuidity networks require sufficient funds in both chains to honor user swaps. Payouts fail or are delayed if pools lack sufficient funds.
Instant‑Swap Routers can have Slippage or routing errors. This happens when swaps across chains misprice or fail if liquidity is thin or paths break.
Cross-chain platforms run independent audits, spread liquidity, or use routing layers to mitigate these risks.
Wrapped tokens issued?
Wrapped tokens introduce an IOU contract risk. This occurs when the issuer is unable to meet redemptions on the source chain. There is also an asset impairment risk if the bridge dies or ceases to function.
Non-EVM chain coverage
Most bridges are Ethereum Virtual Machine (EVM)- heavy. Bitcoin, Solana, Ripple, Tron, and Near are where the coverage gaps appear. Instant-swap aggregators routinely cover 100+ chains across both EVM and non-EVM ecosystems.
Account model and friction
Most cross-chain bridges use wallet connect, not email or Google sign-up. Connect your Web3 wallet, sign transactions. ChangeNOW, for instance, is an account feww for swaps with an optional email sign-up for more management options. Platforms that require document upload to move value are a friction red flag.
Audit history and incident record
Bridges account for over $2 billion in losses in the crypto space. Check that the platform contracts are audited. In the case of an incident record, its resolution state is crucial. A clean incident record at the platform level is a substantive positive, not a marketing claim.
Fee transparency
Some instant swaps will bake all transaction fees into the final quote. Others, due to contract complexity, may split the fees, which may vary based on network congestion. Pricing points include: gas-on-source, gas-on-destination, bridge fee, and slippage.
Security model and audits
The security audits. This includes history and who made the audits. Security details also include reviewing hack incidents and verifying whether victims were fully reimbursed. It is important that the validator set that confirms transactions is decentralized. Features of decentralized systems include diversity, security through distribution, fair governance, and resilience.
TVL and battle-test history
Arguably, a bridge with a high total value locked (TVL) is a big target for hackers; however, it is also a show of might – more skin-in-the-game testing.
The 6 Best Cross-Chain Bridges in 2026
Entry 1: ChangeNOW
Name: ChangeNOW
Landing: https://changenow.io/
Category: Instant-swap aggregator
ChangeNOW is a privacy-focused crypto management platform that has been around since 2017. For cross-chainswaps, ChangeNOW routes user funds through aggregated CEX and DEX liquidity pools to deliver the native asset on the destination chain. For end users looking for cross-chain functionality, ChangeNOW is a top choice since it has no bridge contract surface to hack, no wrapped-IOU contracts to monitor, no gas on multiple chains to manage.
Key features:
- Non-custodial: ChangeNOW never holds users’ assets; it only facilitates transactions when granted permission.
- Fixed-rate and floating-rate swap options
- Limit order functionality
- Private transfers for confidential on-chain transactions
Supported chains count: 110+ supported blockchain networks, with 1,500+ supported assets and 2.25M swap pairs.
Custody/trust model: Non-custodial routing. Funds pass through aggregated liquidity venues.
Audit history: ChangeNOW has no bridge contracts to audit
Notable hacks/incidents: No hack history
Fee structure: Spread baked into the quoted rate. Fixed-rate quotes carry a small premium for the rate lock. No setup or signup fees.
Pros:
- Trades complete with a 98% better-than-estimated rate or <0.5% deviation claim.
- 9 years in operation without a single security breach, a show of resilience and reliability.
- 4.5 Trustpilot rating across 13,000+ reviews
- 2.25M trading pairs, extensive by any standards.
Cons:
- No wrapped token functionality
- Fixed-rate swaps lock the rate but carry a premium and a shorter validity window.
- Floating-rate quotes can slip between estimate and execution.
Best for: Retail swaps, no wrapped tokens.
Entry 2: Across Protocol
Name: Across Protocol
Landing: https://across.to/
Category: Liquidity-network bridge
Across is a cross-chain interoperability protocol that delivers sub-2-second finality through a competitive relayer network. The protocol’s security model combines ZK proofs, security deposits that can be slashed for untrustworthiness, optimistic verification, and a system that only requires one honest actor to dispute and reject a transaction. The protocol supports token bridges and swaps across networks, leveraging an intent-based design for fast transactions.
Key features
- Batch transactions to amortize fees among users- results in lower costs.
- Native asset output- no wrapped tokens
- On-chain transactions with no multisigs and no custody risk.
Supported chains count: 23+ mainnet chains and 8 testnet chains, including first-mover support for Solana, MegaETH, Plasma, Monad, and hyperliquid.
Custody/trust model: Trust the optimistic oracle, the relayer set, and the underlying UMA contracts. Not a validator-set bridge.
Audit history: Audits conducted by OpenZeppelin Security on Across V2, V3, the token and token distributor, and on UMA contracts. Auditors include OpenZeppelin,
Notable hacks/incidents: No security breach to date.
Fee structure: Across keeps fees low by batching all fills into a single settlement, so you’re not paying per transfer—you’re sharing one settlement cost with everyone else.
Pros:
- Native asset on destination, so no wrapped-token exposure.
- Adited contracts by OpenZepellin security.
- 5 million users and partnerships with Coinbase, Metamask, Uniswap, and PancakeSwap, a real-world security signal.
- 1.2s average transaction time
Cons:
- Slippage, pool exhaustion, and rebalancing delays
- Optimistic-oracle dispute window means worst-case finality is hours, not seconds. Rarely triggers in practice, but it’s the design.
Best for: Ultra-low fees, solver model, native outputs.
Entry 3: Stargate V2 (LayerZero)
Name: Stargate Finance (built on LayerZero)
Landing: https://stargate.finance/
Category: Liquidity-network bridge (built on a message-passing layer)
Stargate V2 is a non-custodial cross-chain bridge that lets you swap from one token to another on the same chain or across 15+ supported chains, with near instant speeds and low fees. Stargate pairs native liquidity pools on every supported chain with LayerZero’s verified cross‑chain messaging. The Omnichain Fungible Token (OFT) standard on LayerZero allows fungible tokens to be transferred across multiple blockchains without asset wrapping or middlechains.
Key features
- Built on the LayerZero cross-chain protocol, utilizing ultra-light nodes.
- Instant guaranteed finality on supported routes
- Transaction batching to reduce associated messaging costs
Supported chains count: 80+ blockchains, including leading Layer 1s and Layer 2s such as Ethereum, Solana, Arbitrum, Base, Optimism, Avalanche, and Hyperliquid.
Custody/trust model: Trust the LayerZero DVN (Decentralized Verifier Network) set chosen by Stargate, plus the Stargate contracts themselves.
Audit history: V2 audit by OtterSec and Zellic
Notable hacks/incidents: No direct smart contract exploits or contract breaches. Snapshot Governance Phishing Scam (December 2023),
Fee structure: 6 bps on V1, Dynamic fees on V2 (layer zero execution fee + DVN fee, LayerZero endpoint verification)
Pros:
- Uses LayerZero V2 to achieve cost reduction and expandability across more chains.
- Wide chain coverage via LayerZero, including some non-EVM destinations.
- Smart-contract composable — bridge calls can be wrapped inside other transactions.
- Stargate Bus for batch transactions for lower fees
Cons:
- The trust model relies on LayerZero’s DVN configuration; this has been an active point of community debate.
- Multiple routes are missing on the listed assets, particularly on smaller TVL chains.
- Pool depth can bottleneck large transfers on niche routes (transfers may revert with “insufficient liquidity”).
Best for: Strong DeFi composability, broad chain coverage.
Entry 4: Squid
Name: Squid Router
Landing: https://www.squidrouter.com/
Category: Lock-and-mint + on-chain swap composer
Squid is a cross-chain swap router established in 2022 and has grown to connect 100+ chains and 20,000+ tokens. Squid was incubated in the Axelar ecosystem but has since grown into an independent cross-chain infrastructure with its own protocol and stack. Squid aggregates liquidity from 130+ DEXs and off-chain sources to route virtually any token pair.
Key features:
- Squid Intents that run a real-time auction in which solvers (market makers) compete to fill it at the best price when you initiate a swap
- Full-stack platform, Squid owns everything from protocol-level infrastructure through the routing engine to consumer products.
- Squid MCP server that lets you execute cross-chain swaps directly from an AI assistant like Claude.
Supported chains count: 100+ chains and 20,000+ tokens
Audit history: 6 audits by Ackee Blockchain, 1 by Consensys Diligence, 1 by 0xKaden, and another by n-Var.
Notable hacks/incidents: No major Squid-specific hacks to date.
Fee structure: Fees vary by route and asset type, and Squid charges zero fees for stablecoin swaps.
Pros:
- Backed by big industry investors like Ripple, Polychain, NomadCapital, Fabric, Borderless, and Maelstrom.
- Active integrations with major wallet front-ends.
- Squid Connect lets chains and token issuers plug into Squid’s network.
- Squid’s routing engine uses messaging protocols (including Axelar, CCTP, IBC, Chainflip, and LayerZero) rather than competing with any single one to find the best path.
Cons:
- Slippage on long swap chains can stack.
- Validator-set trust model: stronger than a multisig, weaker than a fully on-chain rollup proof.
- Less battle-tested at extreme TVL than Wormhole or Stargate.
Best for: Flexible swap routing, 100+ chains.
Entry 5: Wormhole
Name: Wormhole
Landing: https://wormhole.com/
Category: Lock-and-mint / message-passing bridge (Guardian network)
Built for scale, Wormhole enables multichain asset movement across 45+ blockchains and integrations across financial markets. Wormhole’s Native Token Transfers (NTT) infrastructure avoids pooled liquidity mechanisms to minimize fees, slippage, and MEV attacks. The Wormhole governance recently passed a proposal for a $250K grants program.
Key features:
- 45+ chains supported, including Solana, Sui, Aptos, Near, Algorand, Cosmos hubs
- Open source infrastructure
- Native Token Transfers (NTT) is an open framework for creating, transferring, and customizing tokens seamlessly across any chain.
Supported chains count: 45+ supported chains
Custody/trust model: Wormhole ‘Guardian infrastructure’ and Global Accountant enable multichain token balance integrity checks, giving access to a global and synchronized token state.
Audit history: Wormhole has been audited by 29 third-party auditors, including Trail of Bits, Neodyme, Kudelski, OtterSec, Certik, Hacken, aZullic, Halborn, among others.
Notable hacks/incidents: In February 2022, Wormhole was hacked for 120,000 wETH valued at approximately $323M at the time. Jump Crypto (Wormhole’s parent organization) stepped in and replenished the entire $323 million out of pocket. In February 2023, the hacker sent the funds to Oasis to exchange for other crypto. Oasis, in compliance with a high court order, deployed a counter-exploit, recovering over $400M. The hacker had earlier ignored a $10M bounty.
Fee structure: Variable. Token bridge transfers pay destination-chain gas + a small relayer tip.
Pros:
- Native USDC support via Circle CCTP on supported routes.
- Support wrapped and native token transfers
- Strong post-hack security investment (Jump-funded, multiple audits).
Cons:
- $323M exploit history
- Missing cross-chain routes for some tokens
Best for: Wide connectivity but scarred by past exploit.
Entry 6: deBridge
Name: deBridge (DLN — deBridge Liquidity Network)
Landing: https://debridge.finance/
Category: Intent-based / order-flow bridge with optional message-passing
deBridge is a non-custodial execution layer for cross-chain and same-chain actions. The platform uses a 0-TVL architecture in which solvers compete to provide the best liquidity. All fees are refunded if a transaction fails or is canceled.
Key features:
- deBridge Liquidity Network (DLN) infrastructure facilitates cross-chain and same-chain swaps at a guaranteed rate with no slippage.
- 0-TVL architecture, solvers provide liquidity at competitive rates
- No wrapped tokens, receive native chain tokens
- $200K bug bounty program
Supported chains: 25+ blockchains, including EVM chains and Solana.
Audit history: 26 audits by Halborn, Zokyo, Ackee blockchain, and Neodyme
Notable hacks/incidents: In August 2022, deBridge was targeted by a Lazarus Group phishing campaign; the attempt failed despite compromising one employee’s machine.
Fee structure: DLN fees include a flat fee in native gas token (0.001 ETH, 0.015 SOL on Solana), a variable protocol fee of 4 bps (0.04%) of the input amount, a taker margin of 4 bps (0.04%) on solver profit, and other gas costs. All are refunded if a transaction fails.
Pros:
- Zero security incidents since launch
- 100% uptime since launch claim with a 1.96s median settlement time
- On-chain analytics easily accessible from the homepage
- Unfulfilled orders can always be canceled — users are never locked out of their funds
- Explicit minimum-receive amounts mean the user knows the worst case before signing.
Cons:
- Does not support wrapped token swaps
- Solver-based liquidity means quotes can vary widely by route and time of day.
- Validator trust model still applies — not a fully trustless bridge.
Best for: Security-first, solver-based, explicit guarantees.
Detailed Comparison Table
| Bridge | Type | Chains supported | Custody/trust model | Audit firms | Notable incidents | Avg fee | Avg time | Wrapped tokens issued? | Non-EVM support |
| ChangeNOW | Instant-swap aggregator | 110+ | No custody, direct swaps | Partner integrations | None reported | ~0.5–1% spread | Seconds–minutes | No | Yes (wide) |
| Across | Liquidity bridge | 15+ | Solver-based liquidity pools | OpenZeppelin | None major | ~0.05–0.1% | Seconds–minutes | No | Limited |
| Stargate | Liquidity bridge (LayerZero) | 30+ | LayerZero relayer trust | LayerZero audits | Minor relayer issues | ~0.1–0.2% | Seconds–minutes | No | Yes |
| Squid | Cross-chain swap composer | 100+ | Axelar validator set | Axelar audits | None major | ~0.2–0.3% | Seconds–minutes | No | Yes |
| Wormhole | Lock-and-mint/message passing | 45+ | Custodial vaults + guardians | Trail of Bits, Certora | $323M exploit (2022), reimbursed | ~0.1–0.2% | Minutes–hours | Yes | Yes |
| deBridge | Liquidity bridge (0-TVL model) | 12+ | Solver-based, 0-TVL design | 26 audits (multiple) | None major | ~0.05–0.1% | Seconds–minutes | No | Limited |
How to Choose a Bridge by Use Case
Moving stablecoins between L2s (Ethereum ↔ Arbitrum ↔ Base ↔ Optimism)
Across or Stargate. Native USDC, fast settlement, and no wrapped IOU.
Moving between EVM and a non-EVM chain (e.g., Ethereum → Solana)
Wormhole, Squid, or ChangeNOW.
Swapping between unrelated assets across unrelated chains (e.g., SOL → ETH on Arbitrum)
Instant-swap aggregators (ChangeNOW, Rango) often beat a Bridge plus DEX hop in terms of user interface. However, there is a slippage trade off igf liuidity is thin.
Bridging Bitcoin
Native Bitcoin bridging is technically hard. Options include: tBTC, centralised wrapped variants (WBTC issued by BitGo), or an instant-swap aggregator if the user just wants the BTC value on another chain rather than a smart-contract-callable wrapped BTC.
Cross-Chain Bridge Risks (and Why They Keep Getting Hacked)
- Smart‑contract risk: Bridges rely on complex contracts to lock and mint assets. Bugs or vulnerabilities can let attackers drain vaults.
- Validator / Oracle capture: Bridges rely on complex contracts to lock and mint assets. Bugs or vulnerabilities can let attackers drain vaults.
- Signature Replay Attacks: Poorly designed signing schemes can allow attackers to reuse valid signatures across different contexts, tricking the bridge into releasing funds multiple times.
- Governance Attacks: Bridges with token‑based governance can be hijacked if attackers accumulate voting power or exploit governance logic.
- Frontend / DNS Hijacks: Even if contracts are secure, attackers can compromise the bridge’s website or DNS records, tricking users into sending funds to malicious addresses.