LayerZero V2 vs Portal (Wormhole)
LayerZero V2 scores 9.56/10 and Portal scores 8.08/10 in the CoinPulse crypto bridges ranking (data collected October 19, 2026). They are first and third of 15, and both have 100% of their score measured. LayerZero V2 leads on audits and value locked. Portal, the Wormhole-based bridge as DefiLlama lists it, leads on time in operation. They tie on chain reach. Neither score covers fees, transfer speed or how each protocol verifies messages.
LayerZero V2 scores higher: 9.56/10 against 8.08/10. It leads on 2 of 4 criteria, Portal on 1.
Criterion by criterion
Same category, same weights, heaviest criterion first. Open a row for each side’s reasoning and evidence.
Security audits35% of the scoreLayerZero V2 leadsLayerZero V210Portal6Why these marks ↓Hide ↑
Scale of value trusted30% of the scoreLayerZero V2 leadsLayerZero V210Portal9Why these marks ↓Hide ↑
Track record22% of the scorePortal leadsLayerZero V28Portal9Why these marks ↓Hide ↑
Multi-chain reach13% of the scoreLevelLayerZero V210Portal10Why these marks ↓Hide ↑
Where the 1.48-point gap comes from
Weighted, the difference breaks down like this:
- Audits: +1.40 to LayerZero V2. Eight listed audits score 10 and one published audit link scores 6. On a 35% weight, that is the largest single source of the gap.
- Value locked: +0.30 to LayerZero V2. $12.49B against $1.58B is roughly eight times more capital. Because value locked is scored on a log scale, that is only one band (10 vs 9).
- Track record: +0.22 to Portal. Portal's longer record wins back a fifth of a point.
- Chain reach: 0. 91 chains and 24 chains both hit the top band, so LayerZero V2's much wider deployment adds nothing to the score.
Remove the audit difference and the two would be 0.08 apart. The ranking order here mostly reflects how many audit links DefiLlama lists for each project. USDT0, which also scores 10 on audits, sits between them at 8.3.
What the scores do not say about security
Readers searching "which is more secure, LayerZero or Wormhole" should know three things this comparison cannot settle:
- Hack history is not scored for bridges. DefiLlama's hack database records one incident matched to Portal: an exploit dated February 2, 2022, recorded as a signature verification flaw, with $326M reported and $326M returned. The bridge was replenished by a backer rather than recovered from the attacker. DefiLlama showed no incident matched to LayerZero V2 on October 19, 2026. Neither fact moves either score.
- An audit count is not an audit verdict. The methodology counts published audit links, not their findings. Portal had audits listed and was still exploited in 2022.
- Verification design is not scored. Who confirms cross-chain messages, and how an individual app configures that, is often the biggest risk in a bridge. Neither score assesses it. LayerZero V2's entry page also notes that tokens and apps built on top of it carry their own risk.
Also not scored: fees, transfer times, supported routes and the interface. Both front ends were faster than the 84 ms category median in the site's single-location probe (LayerZero 56 ms, Portal 72 ms), but latency carries no weight for bridges.
Which fits which reader
- You want the most published audit material to read: LayerZero V2, with eight audit reports from the Endpoint V2 repository against Portal's one listed audit link.
- You weight time in operation over audit count: Portal has the longer measured record (4.6 years vs 2.5). Its record also includes a major 2022 incident, recorded as fully returned. Read the Portal rating before deciding.
- You need a specific chain pair: both score 10 on reach, but the scores do not tell you whether either supports your exact route or token. Check that in each bridge's interface.
- You are moving a large amount: neither score is a safety guarantee. Use a test transfer first and read the verification model in the protocol's own documentation.
The numbers side by side
| Measured | LayerZero V2 | Portal |
|---|---|---|
| Value locked | $12.49B | $1.58B |
| Published audits | 8 | 1 |
| Track record | 2.5 yr | 4.6 yr |
| Chains | 91 | 24 |
Where each one falls short
LayerZero V2
Track record: Live 2.5 yr (since launch (no later than Apr 18, 2024), public record). Most failures happen young, so time survived is real signal.
Portal
Security audits: 1 published audit with links (DefiLlama) — read the findings yourself. Audits reduce risk, they do not remove it.
Which to choose
Is LayerZero better than Wormhole?+
On CoinPulse's four bridge measurements, LayerZero V2 (9.56) scores higher than Portal (8.08), mainly because it lists eight audits against Portal's one published audit link on DefiLlama. "Better" here means more public evidence on audits, value locked, age and reach, not lower fees or proven security.
Does Portal's 2022 exploit lower its score?+
No. Security record carries 0% weight in the bridge category, so the exploit is shown as context on Portal's rating page and does not count against the score.
Are these scores current?+
They use the October 19, 2026 collection. Check the full ranking for the latest data.