Best crypto bridges
Cross-chain asset bridges. We scored 15 of them 0–10 from public data — tvl and audits (defillama); bridges are the #1 exploit surface — and ranked the 15 we could measure well enough to place fairly. No affiliate links: the order reflects the evidence, nothing else.
Last collection 2026-08-25: probed 252 services, measured 233, over a 90-day window. Collected by our own script, not by hand — reproducible, and reproducibly boring.
The full ranking
| # | Service | Score | TVL | Audits | Age | Chains |
|---|---|---|---|---|---|---|
| 1 | Portal | 8.78100% | $1.57B | 2 | 4.5y | 24 |
| 2 | Hyperliquid Bridge | 8.3100% | $6.58B | 2 | 2.4y | 2 |
| 3 | WBTC | 8.0578% | $9.12B | 2 | — | 1 |
| 4 | USDT0 | 7.6100% | $3.25B | 2 | 1.5y | 1 |
| 5 | JustCryptos | 6.16100% | $2.62B | 0 | 4.8y | 1 |
| 6 | LayerZero V2 | 6.0378% | $7.16B | 0 | — | 91 |
| 7 | Binance Bitcoin | 5.94100% | $5.45B | 0 | 2.0y | 1 |
| 8 | Coinbase Bridge | 5.89100% | $7.82B | 0 | 1.5y | 5 |
| 9 | Function FBTC | 5.64100% | $683.5M | 0 | 2.1y | 1 |
| 10 | Unit | 5.59100% | $724.7M | 0 | 1.5y | 5 |
| 11 | Arbitrum Bridge | 5.3678% | $3.34B | 0 | — | 1 |
| 12 | Base Bridge | 5.3678% | $2.87B | 0 | — | 1 |
| 13 | Optimism Bridge | 5.3178% | $587.1M | 0 | — | 3 |
| 14 | Kraken Bitcoin | 5.2100% | $608.6M | 0 | 1.9y | 1 |
| 15 | CCIP | 5.14100% | $1.81B | 0 | 83d | 21 |
Every figure carries the date it was taken, on the service’s card below, linked to its open source. Score is out of what we could measure — the % beside it is coverage.
How we scored crypto bridges
These weights belong to this category alone. Signature measurement here: TVL and audits (DefiLlama); bridges are the #1 exploit surface — Bridges are the single biggest exploit target in crypto, so audits edge out even the value they carry. STATUS not scored for on-chain protocols.
How much value the market trusts it with — TVL, reserves or market cap.
Published third-party security audits, with links to the findings.
How long it has run and survived — time is signal.
How many chains it is deployed across.
Latency in this category is timed at a public API endpoint for every service, so the comparison is like-for-like. We never compare latency across categories — a DEX interface and an exchange API are not the same thing, and pretending otherwise would just reward whoever we happened to probe more cheaply.
The brief also defines FEES and UX (0%, 0%). We don’t publish them: we can’t measure them ourselves, and an estimate dressed as a measurement is worse than a gap. Full methodology
The services
Portal
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$1.57B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 4.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 24 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: 2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$6.58B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 2.4 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 2 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: 2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
WBTC
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$9.12B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Multi-chain reach: Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
USDT0
2 published audits with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
$3.25B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Track record: Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$2.62B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 4.8 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$7.16B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 91 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$5.45B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 2.0 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$7.82B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 5 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
The provider’s feed returns its 50 most recent incidents and no more, which here reaches back 48 days. The remaining 42 are blank because we cannot see them — not because nothing happened.
Over the 48 days the feed covers. Not scored — logging granularity varies between services.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$683.5M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 2.1 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Timed at a different surface from the rest of this category, so not a fair comparison — not scored.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
Unit
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$724.7M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.5 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 5 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$3.34B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
Base Bridge
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$2.87B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$587.1M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
No documented launch or listing date to measure age from.
Deployed on 3 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$608.6M in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 1.9 yr (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 1 chain (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Over the 90 days the feed covers. Not scored — logging granularity varies between services.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
CCIP
No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
$1.81B in value locked (DefiLlama). Capital is the market voting with its money — scored on a log scale, so the jump from $10M to $100M counts for more than $10B to $20B.
Live 83 days (time since DefiLlama listing (a floor on true age)). Most failures happen young, so time survived is real signal.
Deployed on 21 chains (DefiLlama). Breadth is a minor tie-breaker — a focused single-chain protocol can still be excellent.
Security audits: No published audits on DefiLlama. Not proof of insecurity, but an unaudited contract holding funds is a red flag.
Anyone putting size into it: it holds funds in smart contracts with no published audit. Fine to experiment with, not to trust with a position you cannot afford to lose.
Who we left out, and why
We looked at 15, ranked 15.
Head to head
How to choose crypto bridges
Cross-chain asset bridges — and the honest truth is that no single ranking fits everyone. Our scores tell you what is best-evidenced on public data: tvl and audits (defillama); bridges are the #1 exploit surface. Use them as a shortlist, not a verdict.
Start at the top of the table, then open the full breakdown for any service you are considering. Read the coverage figure beside its score — a high number on thin coverage is a narrower claim than the same score fully measured. Check the “where we docked points” and “who it’s not for” notes on each card; the service that scores highest overall is not always the one that fits your specific need. And remember what these scores deliberately leave out — fees and support quality — which you should weigh yourself before committing.
Crypto bridges ratings — FAQ
How are crypto bridges ranked on this page?+
Each service is scored 0–10 from public data — tvl and audits (defillama); bridges are the #1 exploit surface — weighted for what matters in this category, plus our own latency and status checks. 15 of 15 are ranked; the rest we could not measure enough to place fairly. Every figure is dated and links to its source.
What is the best crypto bridge?+
On the data we could measure, Portal scores highest at 8.78/10, ahead of Hyperliquid Bridge (8.3/10). "Best" here means best-evidenced, not most advertised — open each service below for the full breakdown and decide what fits your needs.
Why isn’t the biggest name at the top?+
Size is not a criterion. A large service that publishes no audits or status page cannot demonstrate its safety from the outside, so it scores below a smaller one that can — even if it is perfectly sound. We rate what is verifiable, not what is famous.
What does the "% measured" figure under a score mean?+
It is the share of this category's criteria weight we could actually fill for that service. Anything we could not measure is marked n/a and its weight is redistributed across the rest — never counted as zero — so the percentage tells you how complete the verdict is.
Do you earn money from these rankings?+
No. There are no affiliate links, no paid placements and no sponsored entries anywhere in the ratings section. That is what lets this list put a smaller, audited service above a bigger, opaque one.
No affiliate links, paid placements or ads anywhere on this site. How this is funded · Methodology