Which crypto bridges actually stay up
Best measured: Portal — 8.24/10 on the 100% we could measure.
Runner-up: Hyperliquid Bridge — 7.8/10.
Last collection 2026-08-25: probed 252 services, measured 233, over a 90-day window. Collected by our own script, not by hand — the numbers are reproducible, and reproducibly boring.
The ranking
| # | Service | Score | TVL | Audits | Age | Chains | Status feed |
|---|---|---|---|---|---|---|---|
| 1 | Portal | 8.24100% | $1.57B | 2 | 4.5y | 24 | none |
| 2 | Hyperliquid Bridge | 7.8100% | $6.58B | 2 | 2.4y | 2 | none |
| 3 | WBTC | 7.4580% | $9.12B | 2 | — | 1 | none |
| 4 | USDT0 | 7.16100% | $3.25B | 2 | 1.5y | 1 | none |
| 5 | Coinbase Bridge | 6.24100% | $7.82B | 0 | 1.5y | 5 | statuspage |
| 6 | Binance Bitcoin | 5.88100% | $5.45B | 0 | 2.0y | 1 | unknown |
| 7 | JustCryptos | 5.84100% | $2.62B | 0 | 4.8y | 1 | none |
| 8 | LayerZero V2 | 5.6580% | $7.16B | 0 | — | 91 | none |
| 9 | Kraken Bitcoin | 5.6100% | $608.6M | 0 | 1.9y | 1 | statuspage |
| 10 | Function FBTC | 5.36100% | $683.5M | 0 | 2.1y | 1 | none |
| 11 | Unit | 5.32100% | $724.7M | 0 | 1.5y | 5 | none |
| 12 | Arbitrum Bridge | 5.0580% | $3.34B | 0 | — | 1 | none |
| 13 | Base Bridge | 5.0580% | $2.87B | 0 | — | 1 | none |
| 14 | Optimism Bridge | 580% | $587.1M | 0 | — | 3 | none |
| 15 | CCIP | 4.92100% | $1.81B | 0 | 83d | 21 | none |
Every figure carries the date it was taken, on the service’s card below, linked to its open source. Score is out of what we could measure — the % next to it is coverage.
How we scored this
These weights belong to this category alone. Signature measurement here: TVL and audits (DefiLlama); bridges are the #1 exploit surface — Bridges are the single biggest exploit target in crypto, so audits edge out even the value they carry.
Total value locked (DeFi), on-chain reserves (exchanges) or circulating market cap (stablecoins), from DefiLlama. Capita…
Number of published security audits with links, from DefiLlama's audit field. Not a guarantee — audited protocols still …
Time the service has been live and continuously operating, from DefiLlama's listing date or the documented launch. Survi…
Number of chains the service is deployed on, from DefiLlama. Breadth is resilience and adoption — but only a minor facto…
Whether a public, machine-readable status page exists (statuspage / incident.io / instatus). A service you can audit fro…
Latency in this category is timed at a public API endpoint for every service, so the comparison is like-for-like. We never compare latency across categories — a DEX interface and an exchange API are not the same thing, and pretending otherwise would just reward whoever we happened to probe more cheaply.
The brief also defines FEES and UX (0%, 0%). We don’t publish them: we can’t measure them ourselves, and an estimate dressed as a measurement is worse than a gap. Full methodology
The services
Portal
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$1.57B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 4.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 24 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Status transparency: No public status page found. Nothing about its reliability can be verified from outside — including by us.
Anyone who needs to know when it breaks: no status feed, so you find out it is down by discovering it yourself.
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$6.58B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 2.4 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 2 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Status transparency: No public status page found. Nothing about its reliability can be verified from outside — including by us.
Anyone who needs to know when it breaks: no status feed, so you find out it is down by discovering it yourself.
WBTC
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$9.12B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Status transparency: No public status page found. Nothing about its reliability can be verified from outside — including by us.
Anyone who needs to know when it breaks: no status feed, so you find out it is down by discovering it yourself.
USDT0
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$3.25B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Status transparency: No public status page found. Nothing about its reliability can be verified from outside — including by us.
Anyone who needs to know when it breaks: no status feed, so you find out it is down by discovering it yourself.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$7.82B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 5 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Publishes a machine-readable incident archive (statuspage) — its whole record can be checked by anyone, including against us.
The provider’s feed returns its 50 most recent incidents and no more, which here reaches back 48 days. The remaining 42 are blank because we cannot see them — not because nothing happened.
Over the 48 days the feed covers. Not scored — logging granularity varies between services.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$5.45B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 2.0 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
A status page exists but publishes no feed we could parse — readable, not auditable. Part of that may be our blind spot (we read three platforms).
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$2.62B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 4.8 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$7.16B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 91 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$608.6M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.9 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Publishes a machine-readable incident archive (statuspage) — its whole record can be checked by anyone, including against us.
Over the 90 days the feed covers. Not scored — logging granularity varies between services.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$683.5M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 2.1 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
Unit
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$724.7M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 5 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$3.34B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
Base Bridge
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$2.87B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$587.1M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 3 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
CCIP
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$1.81B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 83 days (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 21 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
No public status page found. Nothing about its reliability can be verified from outside — including by us.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
Who we left out, and why
We looked at 15, ranked 15.
Head to head
Questions
Why isn’t the biggest name at the top?+
Because we rank on whether a service works and can be checked, not on how big it is. Size is not a criterion here — a large service that publishes no status feed cannot demonstrate its reliability to anyone, and it scores accordingly.
What does "62% measured" mean under a score?+
It is the share of our criteria weight we actually measured for that service. The rest is n/a — we did not measure it, so its weight was redistributed across what we did measure rather than counted as zero. A high score at low coverage is a narrower claim than the same score at high coverage, and we would rather show you that than hide it.
Where do the incident numbers come from?+
From each provider's own status page, which several publish as a machine-readable feed. We compute repair time from their published report and resolution timestamps, and link the source on every figure so you can check it. It is their record — we just do the arithmetic and refuse to round it in their favour.
No affiliate links or paid placements in this section. How this is funded · Methodology