Across review
Intent bridge — relayers pay you first, then are repaid through optimistic settlement secured by UMA
Key findings
Across Protocol is an intent-based bridge: you deposit into a SpokePool, a relayer pays you on the destination chain from its own capital, and the relayer is repaid later through bundles that can be disputed for 30 minutes and escalated to UMA. Its admin multisig can upgrade SpokePools without delay. Its first reported attack since 2021 (Solana, July 2026) cost the relayer, not users.
As of 3 Nov 2026, 10:35 UTC (run #538), Across returned quotes on 36 sampled routes (192 quote rows in this packet). At $200 it was the cheapest ranked quote on 8 routes. Median cost among its non-negative $200 quotes: 5.38 bps (cheapest observed 0.98 bps). Sources reporting it: Across, LI.FI. Real-money tests: none yet — planned after launch.
- 7-day coverage: rankable quotes on 36 routes in 336 of 336 runs (63,521 rows).
- Gas policy: Across source-chain gas is never counted in rankings (decided).
- Integrator:
0x03db, app fee 0. - Real-money tests: none yet after launch
- Type: Intent bridge — relayers pay you first, then are repaid through optimistic settlement secured by UMA Risk card →
- Incidents: 1 see below
Source: upswap.io snapshot #538 · CC BY 4.0 · Zenodo DOI: Example / pending
How does Across work?
You deposit into the origin chain's SpokePool contract and specify recipient, destination chain, output token and a fill deadline. A relayer watches for the deposit and pays you on the destination chain from its own funds; your deposit stays in the SpokePool. Periodically a whitelisted proposer posts a root bundle to the HubPool on Ethereum stating what each relayer is owed. The proposer bonds 0.45 ABT and the bundle can be challenged for 30 minutes; disputes go to UMA's optimistic oracle (L2Beat).
Liquidity providers deposit single tokens into the HubPool and earn the LP fee. On chains with a canonical L1↔L2 messenger, Across rebalances through that bridge; on others it uses storage-proof adapters, LayerZero OFT, or Circle CCTP for USDC (L2Beat). A newer "V5 Gateway" lets solvers execute user-signed multi-step paths using standing token approvals.
Scorecard (no total score)
Cost excl. gas
Coverage
$200 wins
Quote rows
Real transfers
Upgrade / custody
How much does Across cost on each route?
Over the last 7 days Across's median $200 cost ranged from 0.98 bps (Ethereum → OP Mainnet ETH) to 5.69 bps (Base → Ethereum ETH); it was the cheapest bridge in 4239 route-runs.
| Route | n | Min | P25 | Median | P75 | Max | Cheapest runs |
|---|---|---|---|---|---|---|---|
| Ethereum → OP Mainnet ETH | 336 | 0.98 | 0.98 | 0.98 | 0.98 | 1.33 | 194 |
| Solana → Base USDC | 336 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 318 |
| Ethereum → Solana USDC | 336 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 334 |
| Solana → Ethereum USDC | 336 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 336 |
| Solana → Arbitrum One USDC | 336 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 237 |
| Ethereum → OP Mainnet USDC | 336 | 1.01 | 1.01 | 1.01 | 1.01 | 1.36 | 0 |
| Base → OP Mainnet USDC | 336 | 1.01 | 1.01 | 1.01 | 1.01 | 1.38 | 0 |
| Ethereum → Base ETH | 336 | 1.17 | 1.17 | 1.18 | 1.18 | 2.15 | 238 |
| Ethereum → Base USDC | 336 | 1.19 | 1.19 | 1.20 | 1.20 | 2.07 | 0 |
| Arbitrum One → Base USDC | 336 | 1.19 | 1.19 | 1.20 | 1.20 | 2.07 | 0 |
| OP Mainnet → Base USDC | 336 | 1.19 | 1.19 | 1.20 | 1.20 | 1.98 | 0 |
| Polygon PoS → Base USDC | 336 | 1.19 | 1.19 | 1.20 | 1.20 | 1.97 | 0 |
| Arbitrum One → BNB Chain USDT | 297 | 0.20 | 1.20 | 1.21 | 1.22 | 1.22 | 297 |
| Ethereum → BNB Chain USDT | 297 | 0.20 | 1.20 | 1.21 | 1.22 | 1.22 | 297 |
| Ethereum → Avalanche C-Chain USDC | 336 | 1.20 | 1.20 | 1.21 | 1.21 | 1.52 | 1 |
| Arbitrum One → Hyperliquid (HyperCore) USDC | 336 | 1.15 | 1.20 | 1.23 | 1.29 | 57.41 | 0 |
| Base → Solana USDC | 336 | 1.30 | 1.30 | 1.30 | 1.30 | 1.30 | 300 |
| Base → Polygon PoS USDC | 336 | 1.02 | 1.37 | 1.40 | 1.42 | 1.69 | 0 |
| Arbitrum One → Solana USDC | 336 | 1.40 | 1.40 | 1.40 | 1.40 | 1.40 | 316 |
| Ethereum → Arbitrum One USDC | 336 | 1.39 | 1.40 | 1.40 | 1.42 | 66.80 | 152 |
| Polygon PoS → Arbitrum One USDC | 336 | 1.39 | 1.40 | 1.40 | 1.42 | 66.50 | 196 |
| Arbitrum One → Polygon PoS USDC | 336 | 1.02 | 1.38 | 1.41 | 1.45 | 1.67 | 0 |
| Base → Arbitrum One USDC | 336 | 1.39 | 1.40 | 1.41 | 1.42 | 66.55 | 85 |
| Ethereum → Arbitrum One USDT | 336 | 1.39 | 1.40 | 1.41 | 1.42 | 45.67 | 180 |
| Ethereum → Polygon PoS USDC | 336 | 1.02 | 1.38 | 1.41 | 1.45 | 1.67 | 0 |
| BNB Chain → Arbitrum One USDT | 300 | 1.40 | 1.42 | 1.43 | 6.42 | 45.58 | 159 |
| Ethereum → Arbitrum One ETH | 336 | 1.44 | 1.46 | 1.47 | 1.48 | 62.80 | 196 |
| Arbitrum One → Ethereum USDC | 336 | 1.49 | 1.72 | 2.15 | 4.04 | 1,911.88 | 133 |
| Base → Ethereum USDC | 336 | 1.49 | 1.72 | 2.15 | 3.99 | 1,911.88 | 131 |
| Arbitrum One → OP Mainnet ETH | 336 | 2.58 | 2.60 | 4.87 | 4.89 | 4.92 | 7 |
| Arbitrum One → Base ETH | 336 | 2.78 | 2.80 | 5.07 | 5.09 | 5.11 | 6 |
| OP Mainnet → Base ETH | 336 | 2.78 | 2.80 | 5.07 | 5.09 | 5.11 | 6 |
| Base → Arbitrum One ETH | 336 | 3.08 | 3.10 | 5.36 | 5.38 | 64.59 | 2 |
| OP Mainnet → Arbitrum One ETH | 336 | 3.08 | 3.10 | 5.36 | 5.38 | 64.34 | 2 |
| Arbitrum One → Ethereum ETH | 331 | 3.27 | 5.38 | 5.69 | 7.05 | 1,553.47 | 105 |
| Base → Ethereum ETH | 331 | 3.27 | 5.37 | 5.69 | 7.09 | 1,563.86 | 11 |
Where does Across win at $200?
| Route | Via source | bps | Route leader |
|---|---|---|---|
| Solana → Base USDC | Across | 1.00 | this bridge |
| Ethereum → Solana USDC | Across | 1.00 | this bridge |
| Solana → Ethereum USDC | Across | 1.00 | this bridge |
| Ethereum → Base ETH | Across | 1.17 | this bridge |
| Arbitrum One → BNB Chain USDT | Across | 1.20 | this bridge |
| Ethereum → BNB Chain USDT | Across | 1.20 | this bridge |
| Base → Solana USDC | Across | 1.30 | this bridge |
| Arbitrum One → Solana USDC | Across | 1.40 | this bridge |
| Ethereum → OP Mainnet ETH | Across | 0.98 | Layerswap 0.35 |
| Solana → Arbitrum One USDC | Across | 1.00 | Layerswap 0.60 |
| Base → OP Mainnet USDC | Across | 1.01 | Eco 0.00 |
| Ethereum → OP Mainnet USDC | Across | 1.01 | Eco 0.00 |
| Ethereum → Base USDC | Across | 1.19 | Eco 0.00 |
| Arbitrum One → Base USDC | Across | 1.19 | Eco 0.00 |
| OP Mainnet → Base USDC | Across | 1.19 | Eco 0.00 |
| Polygon PoS → Base USDC | Across | 1.19 | Eco 0.00 |
| Ethereum → Avalanche C-Chain USDC | Across | 1.20 | NEAR Intents 1Click 0.31 |
| Arbitrum One → Hyperliquid (HyperCore) USDC | Across | 1.27 | Hyperliquid Native 0.00 |
| Base → Polygon PoS USDC | Across | 1.37 | Eco 0.00 |
| Base → Arbitrum One USDC | Across | 1.40 | Eco 0.00 |
| Ethereum → Arbitrum One USDC | Across | 1.40 | Eco 0.00 |
| Polygon PoS → Arbitrum One USDC | Across | 1.40 | Eco 0.00 |
| Ethereum → Arbitrum One USDT | Across | 1.41 | Eco 0.87 |
| BNB Chain → Arbitrum One USDT | Across | 1.42 | Celer 1.36 |
| Ethereum → Polygon PoS USDC | Across | 1.43 | Eco 0.00 |
| Arbitrum One → Polygon PoS USDC | Across | 1.44 | Eco 0.00 |
| Ethereum → Arbitrum One ETH | Across | 1.47 | Layerswap 0.16 |
| Base → Ethereum USDC | Across | 2.10 | Eco 0.00 |
| Arbitrum One → Ethereum USDC | Across | 2.14 | Eco 0.00 |
| Arbitrum One → OP Mainnet ETH | Across | 4.89 | Celer 1.92 |
| Arbitrum One → Base ETH | Across | 5.09 | Celer 1.50 |
| OP Mainnet → Base ETH | Across | 5.09 | Celer 1.50 |
| OP Mainnet → Arbitrum One ETH | Across | 5.38 | Layerswap 0.40 |
| Base → Arbitrum One ETH | Across | 5.38 | Layerswap 0.45 |
| Arbitrum One → Ethereum ETH | Across | 6.12 | Eco 2.39 |
| Base → Ethereum ETH | Across | 6.12 | Relay 3.72 |
What are the risks of using Across?
Each item links to its source (L2Beat, DefiLlama or official docs). Items we could not verify are marked 待核实. No overall score.
Settlement & disputes
Relayer repayments are optimistic: a bonded proposer posts bundles, anyone can dispute within 30 minutes by posting an equal bond, and disputes are resolved by UMA token voting. Users are paid before settlement, so a settlement failure hits relayers and LPs first.
L2BeatUpgrade authority
The Across Multisig (3/5) can upgrade the SpokePools with no delay; a separate path through the OptimisticGovernor applies a 2-day delay. The V5 Gateway is upgradable with no delay by a 3/5 Across Gateway Multisig, which puts standing approvals to the Gateway at risk if that multisig is compromised.
L2BeatApproval risk
Classic deposits need an approval only for the amount you bridge. V5 Gateway executions pull funds via standing approvals or signed permits, so prefer exact-amount approvals.
L2BeatRecent changes
L2Beat lists high-severity updates on 2026-10-16, 2026-10-12, 2026-09-15, 2026-08-25 and 2026-08-17 (the V5 Gateway launch). The last SpokePool upgrade on Ethereum was on 2026-08-14.
L2BeatSecurity incidents
17 July 2026: forged Solana deposit events fooled the Risk Labs relayer; ≈ $4.5M gross relayer loss, no user funds lost; Solana routes paused about 12 hours. The attacker later returned the remaining ≈ $3.7M for a 10% bounty.
The CryptonomistDefiLlama HacksAcross Protocol
What fees does Across charge?
- LP fee
- Utilisation-based (Aave-style two-slope curve); zero when the relayer is repaid on the origin chain. Across
- Relayer fee
- Covers the relayer's destination gas, capital cost and risk; the total fee is simply input minus output. Across
On upswap, Across source-chain gas is never counted in rankings (decided policy). Our API calls carry integrator ID 0x03db with an app fee of 0.
How did its quotes perform in our data?
Quotes for Across in run #538, by the API that reported them.
| Source | Type | Routes | Quote rows | $200 cheapest | Median $200 bps | Negative-cost rows |
|---|---|---|---|---|---|---|
| Across | direct | 36 | 108 | 8 | 1.40 | 0 |
| LI.FI | via aggregator | 28 | 84 | 0 | 26.42 | 0 |
Negative-cost quotes (receiving more than you send) are listed, never ranked. Cost excludes source-chain gas.
Has upswap tested it with real money?
Not yet. Real-money tests are planned after launch; no test wallets or transactions are published yet.
What are the pros and cons?
Pros
- Users are paid by relayers in seconds and never wait for settlement.
- A settlement failure is absorbed by relayers and LPs first — the July 2026 incident showed this in practice.
- Contracts and permissions are documented in detail on L2Beat.
Cons
- A 3/5 multisig can upgrade SpokePools and the V5 Gateway with no delay.
- Coverage is focused on popular chains and assets.
- Relay of messages to some chains depends on third-party bridges (LayerZero OFT, CCTP).
Who is Across for?
Good for fast ETH and stablecoin transfers between major Ethereum L2s and L1 where you value speed and a clear settlement design; for large amounts, check the upgrade-without-delay risk and split transfers.
Has it been hacked?
- — Across Protocol (Solana relayer) · $4.5M · Off-chain software
Which official links are verified?
Sources
- Across — interop protocol page — L2Beat · Database · checked
- Fees in the System — Across · Docs · checked
- Across — protocol page — DefiLlama · Database · checked
- DefiLlama Hacks — Across 2026-07-17 — DefiLlama Hacks · Database · checked
- Across Solana Relayer Attack Drained $4.5M — No User Lost a Cent — The Cryptonomist · Media · checked
- Update on the July 17 Relayer Incident: the funds are back — Across Protocol · Official · checked
Changelog
- — Draft review written: mechanism, risk card and fees from L2Beat and Across docs; incident linked.
How do I cite this page?
Burn, A. / upswap.io (2026). Across Protocol review. Updated 2026-10-24. https://upswap.io/bridges/across#summary. CC BY 4.0. Accessed ____.
Stable anchors: #summary #type #risk #fee-structure #performance #tests #pros-cons #fit #incidents #official #sources #changelog #disclosure #cite
