Arbitrum Bridge review
Canonical rollup bridge — deposits are messages to the rollup; withdrawals wait out the fraud-proof challenge period
Key findings
The Arbitrum Bridge is Arbitrum One's canonical bridge: it carries no third-party trust beyond the rollup itself. Deposits from Ethereum arrive in roughly 15–30 minutes; withdrawals to Ethereum take at least seven days because of the 6d 8h fraud-proof challenge period. Arbitrum One is a Stage 1 rollup per L2Beat, and its 9-of-12 Security Council can upgrade the bridge instantly in an emergency.
As of 3 Nov 2026, 12:35 UTC (run #542) our packet has no quotes attributed to Arbitrum Bridge, so there is not enough data for a price assessment. Real-money tests: none yet — planned after launch.
- 7-day coverage: rankable quotes on 1 routes in 262 of 336 runs (448 rows).
- Gas policy: Gas is shown per quote when the API returns it; ranking uses net received excl. gas.
- Real-money tests: none yet after launch
- Type: Canonical rollup bridge — deposits are messages to the rollup; withdrawals wait out the fraud-proof challenge period Risk card →
Source: upswap.io snapshot #542 · CC BY 4.0 · Zenodo DOI: Example / pending
How does Arbitrum Bridge work?
Deposits (Ethereum → Arbitrum One) lock ETH or tokens in the bridge contracts on Ethereum and send a message that the rollup must include; funds arrive in roughly 15–30 minutes (Arbitrum docs).
Withdrawals (Arbitrum One → Ethereum) are messages that can only be executed on Ethereum after the state they belong to survives the challenge period — 6d 8h plus a 2d execution delay on L2Beat's measure — so you wait at least seven days and then claim on Ethereum (L2Beat).
What are the risks of using Arbitrum Bridge?
Each item links to its source (L2Beat, DefiLlama or official docs). Items we could not verify are marked 待核实. No overall score.
State validation
Fraud proofs secure withdrawals (6d 8h challenge period + 2d execution delay). L2Beat says Arbitrum One passes the walkaway test: users can exit even if the operator is malicious and the Security Council disappears.
L2BeatUpgrade authority
Regular upgrades go through DAO governance with a 10-day exit window. The 9/12 Security Council can upgrade instantly in an emergency, with no exit window; it did so on 2026-05-24 to patch a governance denial-of-service in the bridge (no funds at risk).
L2BeatRecent actions
2026-10-02: the Security Council paused new Stylus program activations. 2026-04-21: it recovered ~30,766 ETH from the KelpDAO exploiter on Arbitrum.
L2BeatApproval risk
Token deposits need an allowance to the bridge's gateway contract for the amount you send.
Arbitrum
What fees does Arbitrum Bridge charge?
- Bridge fee
- No bridge fee; you pay gas on Ethereum and on Arbitrum One, and a second Ethereum transaction to claim a withdrawal. Arbitrum
We only see the Arbitrum native bridge through aggregators (LI.FI, Socket), so their quotes may include an aggregator fee; the seven-day withdrawal wait is not reflected in price.
How did its quotes perform in our data?
No quotes for this bridge in run #542. not enough data
Has upswap tested it with real money?
Not yet. Real-money tests are planned after launch; no test wallets or transactions are published yet.
What are the pros and cons?
Pros
- No trust beyond the rollup; Stage 1 per L2Beat.
- No bridge fee.
- Passes L2Beat's walkaway test.
Cons
- Withdrawals to Ethereum take at least seven days and need a claim transaction.
- Security Council can upgrade instantly in emergencies.
- Only connects Ethereum and Arbitrum One.
Who is Arbitrum Bridge for?
Best for large deposits into Arbitrum One and for withdrawals when you can wait a week and want the fewest trust assumptions.
Has it been hacked?
No incident linked in our incident library.
Which official links are verified?
- Bridge app bridge.arbitrum.io · checked 2026-10-24
- Bridge docs docs.arbitrum.io/arbitrum-bridge/quickstart · checked 2026-10-24
What is still unverified?
- 待核实 bridge.arbitrum.io now redirects (308) to portal.arbitrum.io/bridge, which returns 403 to automated checks (Cloudflare); link confirmed via Arbitrum's own docs, not by direct fetch.
Sources
- Arbitrum One — scaling project page — L2Beat · Database · checked
- Arbitrum Bridge quickstart — Arbitrum · Docs · checked
- Arbitrum Bridge — protocol page — DefiLlama · Database · checked
Changelog
- — Draft review written from L2Beat (Arbitrum One) and Arbitrum docs.
How do I cite this page?
Burn, A. / upswap.io (2026). Arbitrum One canonical bridge (Arbitrum Bridge) review. Updated 2026-10-24. https://upswap.io/bridges/arbitrum-native#summary. CC BY 4.0. Accessed ____.
Stable anchors: #summary #type #risk #fee-structure #performance #tests #pros-cons #fit #incidents #official #sources #changelog #disclosure #cite
