Bridge review

Arbitrum Bridge review

Canonical rollup bridge — deposits are messages to the rollup; withdrawals wait out the fraud-proof challenge period

Snapshot Updated Not enough data · 1/5 routes in 7 d

Key findings

The Arbitrum Bridge is Arbitrum One's canonical bridge: it carries no third-party trust beyond the rollup itself. Deposits from Ethereum arrive in roughly 15–30 minutes; withdrawals to Ethereum take at least seven days because of the 6d 8h fraud-proof challenge period. Arbitrum One is a Stage 1 rollup per L2Beat, and its 9-of-12 Security Council can upgrade the bridge instantly in an emergency.

As of 3 Nov 2026, 12:35 UTC (run #542) our packet has no quotes attributed to Arbitrum Bridge, so there is not enough data for a price assessment. Real-money tests: none yet — planned after launch.

Source: upswap.io snapshot #542 · CC BY 4.0 · Zenodo DOI: Example / pending

How does Arbitrum Bridge work?

Deposits (Ethereum → Arbitrum One) lock ETH or tokens in the bridge contracts on Ethereum and send a message that the rollup must include; funds arrive in roughly 15–30 minutes (Arbitrum docs).

Withdrawals (Arbitrum One → Ethereum) are messages that can only be executed on Ethereum after the state they belong to survives the challenge period — 6d 8h plus a 2d execution delay on L2Beat's measure — so you wait at least seven days and then claim on Ethereum (L2Beat).

What are the risks of using Arbitrum Bridge?

sources checked 2026-10-24

Each item links to its source (L2Beat, DefiLlama or official docs). Items we could not verify are marked 待核实. No overall score.

  • State validation

    Fraud proofs secure withdrawals (6d 8h challenge period + 2d execution delay). L2Beat says Arbitrum One passes the walkaway test: users can exit even if the operator is malicious and the Security Council disappears.

    L2Beat
  • Upgrade authority

    Regular upgrades go through DAO governance with a 10-day exit window. The 9/12 Security Council can upgrade instantly in an emergency, with no exit window; it did so on 2026-05-24 to patch a governance denial-of-service in the bridge (no funds at risk).

    L2Beat
  • Recent actions

    2026-10-02: the Security Council paused new Stylus program activations. 2026-04-21: it recovered ~30,766 ETH from the KelpDAO exploiter on Arbitrum.

    L2Beat
  • Approval risk

    Token deposits need an allowance to the bridge's gateway contract for the amount you send.

    Arbitrum

What fees does Arbitrum Bridge charge?

Bridge fee
No bridge fee; you pay gas on Ethereum and on Arbitrum One, and a second Ethereum transaction to claim a withdrawal. Arbitrum

We only see the Arbitrum native bridge through aggregators (LI.FI, Socket), so their quotes may include an aggregator fee; the seven-day withdrawal wait is not reflected in price.

How did its quotes perform in our data?

run #542

No quotes for this bridge in run #542. not enough data

Has upswap tested it with real money?

Not yet. Real-money tests are planned after launch; no test wallets or transactions are published yet.

What are the pros and cons?

Pros

  • No trust beyond the rollup; Stage 1 per L2Beat.
  • No bridge fee.
  • Passes L2Beat's walkaway test.

Cons

  • Withdrawals to Ethereum take at least seven days and need a claim transaction.
  • Security Council can upgrade instantly in emergencies.
  • Only connects Ethereum and Arbitrum One.

Who is Arbitrum Bridge for?

Best for large deposits into Arbitrum One and for withdrawals when you can wait a week and want the fewest trust assumptions.

Has it been hacked?

No incident linked in our incident library.

Incident library →

Which official links are verified?

  • Bridge app bridge.arbitrum.io · checked 2026-10-24
  • Bridge docs docs.arbitrum.io/arbitrum-bridge/quickstart · checked 2026-10-24

What is still unverified?

  • 待核实 bridge.arbitrum.io now redirects (308) to portal.arbitrum.io/bridge, which returns 403 to automated checks (Cloudflare); link confirmed via Arbitrum's own docs, not by direct fetch.

Sources

  1. Arbitrum One — scaling project page — L2Beat · Database · checked
  2. Arbitrum Bridge quickstart — Arbitrum · Docs · checked
  3. Arbitrum Bridge — protocol page — DefiLlama · Database · checked

Changelog

  • — Draft review written from L2Beat (Arbitrum One) and Arbitrum docs.

How do I cite this page?

Burn, A. / upswap.io (2026). Arbitrum One canonical bridge (Arbitrum Bridge) review. Updated 2026-10-24. https://upswap.io/bridges/arbitrum-native#summary. CC BY 4.0. Accessed ____.

Stable anchors: #summary #type #risk #fee-structure #performance #tests #pros-cons #fit #incidents #official #sources #changelog #disclosure #cite