Circle CCTP review
Issuer burn-and-mint — USDC is burned on the source chain and minted by Circle on the destination after Circle's attestation
Key findings
Circle's Cross-Chain Transfer Protocol (CCTP) moves native USDC by burning it on the source chain and minting it on the destination after Circle's off-chain Iris service signs an attestation (2-of-2 attesters). There is no pool and no third-party liquidity, so the main risk is Circle itself. Standard Transfers are free; Fast Transfers cost 0–13 bps depending on the source chain.
As of 3 Nov 2026, 11:35 UTC (run #540), Circle CCTP (Fast) returned quotes on 22 sampled routes (310 quote rows in this packet). At $200 it was the cheapest ranked quote on 0 routes. Median cost among its non-negative $200 quotes: 31.00 bps (cheapest observed 26.99 bps). Sources reporting it: Circle CCTP V2(费率表), LI.FI. Real-money tests: none yet — planned after launch.
- 7-day coverage: rankable quotes on 20 routes in 336 of 336 runs (60,965 rows).
- Gas policy: Gas is shown per quote when the API returns it; ranking uses net received excl. gas.
- Real-money tests: none yet after launch
- Type: Issuer burn-and-mint — USDC is burned on the source chain and minted by Circle on the destination after Circle's attestation Risk card →
Source: upswap.io snapshot #540 · CC BY 4.0 · Zenodo DOI: Example / pending
How does Circle CCTP work?
You call depositForBurn on the source chain's TokenMessenger; your USDC is burned. Circle's off-chain Iris attestation service observes the burn and signs an attestation. Anyone holding the message and attestation can call receiveMessage on the destination MessageTransmitter, which checks the attester signatures and mints USDC to the recipient (L2Beat).
Standard Transfer waits for source-chain finality. Fast Transfer gets an attestation before finality, backed by Circle's Fast Transfer allowance, for a per-route fee (Circle docs).
Scorecard (no total score)
Cost excl. gas
Coverage
$200 wins
Quote rows
Real transfers
Upgrade / custody
How much does Circle CCTP (Fast) cost on each route?
Over the last 7 days Circle CCTP (Fast)'s median $200 cost ranged from 26.99 bps (Ethereum → Base USDC) to 175.87 bps (Ethereum → Arbitrum One USDT); it was the cheapest bridge in 4 route-runs.
| Route | n | Min | P25 | Median | P75 | Max | Cheapest runs |
|---|---|---|---|---|---|---|---|
| Ethereum → Base USDC | 336 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| Arbitrum One → Base USDC | 335 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| Ethereum → OP Mainnet USDC | 334 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| Ethereum → Polygon PoS USDC | 335 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| Arbitrum One → Polygon PoS USDC | 336 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| Base → OP Mainnet USDC | 334 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| OP Mainnet → Base USDC | 336 | 25.31 | 26.99 | 26.99 | 27.00 | 31.29 | 0 |
| Polygon PoS → Base USDC | 336 | 26.99 | 26.99 | 26.99 | 27.00 | 29.99 | 0 |
| Base → Polygon PoS USDC | 336 | 26.99 | 26.99 | 26.99 | 27.00 | 30.00 | 0 |
| Ethereum → Avalanche C-Chain USDC | 336 | 26.99 | 26.99 | 26.99 | 27.00 | 27.00 | 0 |
| Polygon PoS → Arbitrum One USDC | 335 | 28.94 | 29.04 | 29.08 | 29.19 | 30.00 | 0 |
| Ethereum → Arbitrum One USDC | 334 | 28.93 | 29.04 | 29.08 | 29.20 | 30.00 | 0 |
| Base → Arbitrum One USDC | 336 | 28.97 | 29.04 | 29.08 | 29.19 | 30.00 | 0 |
| Ethereum → Solana USDC | 335 | 50.03 | 50.83 | 51.12 | 52.17 | 108.65 | 0 |
| Base → Solana USDC | 336 | 50.40 | 51.16 | 51.45 | 52.50 | 108.59 | 0 |
| Arbitrum One → Solana USDC | 334 | 50.48 | 51.27 | 51.56 | 52.60 | 108.68 | 0 |
| Base → Ethereum USDC | 332 | 70.84 | 71.63 | 72.03 | 73.35 | 124.95 | 2 |
| Arbitrum One → Ethereum USDC | 330 | 71.71 | 72.52 | 72.92 | 74.24 | 124.90 | 2 |
| Ethereum → Solana ETH→SOL | 14 | 97.31 | 133.75 | 145.57 | 152.41 | 167.76 | 0 |
| Ethereum → Arbitrum One USDT | 15 | 114.09 | 147.71 | 175.87 | 177.62 | 179.15 | 0 |
Where does Circle CCTP (Fast) win at $200?
| Route | Via source | bps | Route leader |
|---|---|---|---|
| Ethereum → OP Mainnet USDC | LI.FI | 26.99 | Eco 0.00 |
| Base → OP Mainnet USDC | LI.FI | 26.99 | Eco 0.00 |
| Arbitrum One → Base USDC | LI.FI | 26.99 | Eco 0.00 |
| Ethereum → Polygon PoS USDC | LI.FI | 26.99 | Eco 0.00 |
| Arbitrum One → Polygon PoS USDC | LI.FI | 26.99 | Eco 0.00 |
| OP Mainnet → Base USDC | LI.FI | 26.99 | Eco 0.00 |
| Polygon PoS → Base USDC | LI.FI | 26.99 | Eco 0.00 |
| Base → Polygon PoS USDC | LI.FI | 26.99 | Eco 0.00 |
| Ethereum → Avalanche C-Chain USDC | LI.FI | 26.99 | NEAR Intents 1Click 0.40 |
| Ethereum → Base USDC | LI.FI | 26.99 | Eco 0.00 |
| Ethereum → Arbitrum One USDC | LI.FI | 29.07 | Eco 0.00 |
| Base → Arbitrum One USDC | LI.FI | 29.07 | Eco 0.00 |
| Polygon PoS → Arbitrum One USDC | LI.FI | 29.07 | Eco 0.00 |
| Ethereum → Solana USDC | LI.FI | 50.31 | Across 1.00 |
| Base → Solana USDC | LI.FI | 50.64 | Across 1.30 |
| Arbitrum One → Solana USDC | LI.FI | 50.75 | Across 1.40 |
| Base → Ethereum USDC | LI.FI | 71.95 | Eco 0.00 |
| Arbitrum One → Ethereum USDC | LI.FI | 72.84 | Eco 0.00 |
What are the risks of using Circle CCTP?
Each item links to its source (L2Beat, DefiLlama or official docs). Items we could not verify are marked 待核实. No overall score.
Attestation
Security depends on Circle's attestation service signing only valid burns and protecting its keys; v1 and v2 both use a 2/2 attester threshold. The attester manager can change attesters and thresholds.
L2BeatUpgrade authority
CCTP v2 contracts are proxied, and their proxy admins can replace implementations with no on-chain delay. Circle also holds roles to pause message transmission and to blacklist addresses on USDC.
L2BeatApproval risk
You approve USDC to Circle's TokenMessenger for the burn amount; there is no third-party router in a direct CCTP transfer.
L2BeatSecurity incidents
No CCTP incident in DefiLlama Hacks as of 2026-10-24.
DefiLlama Hacks
What fees does Circle CCTP charge?
- Standard Transfer
- Free (you still pay gas on both chains, or a relayer does). Circle
- Fast Transfer
- 0–13 bps depending on the source chain, deducted when USDC is minted; a maxFee parameter caps it. Circle
Our direct CCTP rows are computed from Circle's published Fast Transfer fee schedule (source name “Circle CCTP V2 (fee schedule)”), not from a live quote: received = amount × (1 − fee bps) − Circle Forwarder's medium forwarding fee. Source-chain gas is not included and no transfer time is shown.
How did its quotes perform in our data?
Quotes for Circle CCTP (Fast) in run #540, by the API that reported them.
| Source | Type | Routes | Quote rows | $200 cheapest | Median $200 bps | Negative-cost rows |
|---|---|---|---|---|---|---|
| Circle CCTP V2(费率表) | direct | 21 | 126 | 0 | — | 0 |
| LI.FI | via aggregator | 19 | 184 | 0 | 31.00 | 0 |
Negative-cost quotes (receiving more than you send) are listed, never ranked. Cost excludes source-chain gas.
Has upswap tested it with real money?
Not yet. Real-money tests are planned after launch; no test wallets or transactions are published yet.
What are the pros and cons?
Pros
- Native USDC on both ends — no wrapped token, no pool to drain.
- Standard Transfers are free; Fast Transfers cost at most 13 bps.
- Used under the hood by many other bridges.
Cons
- USDC (and EURC) only.
- Fully trusts Circle: attestation, upgrades, pausing and blacklisting.
- Using it directly means claiming on the destination chain yourself unless an app relays for you.
Who is Circle CCTP for?
The default choice for moving USDC between supported chains if you already trust Circle as the USDC issuer; pick Standard to save the fee when you can wait for finality.
Has it been hacked?
No incident linked in our incident library.
Which official links are verified?
- Product page www.circle.com/cross-chain-transfer-protocol · checked 2026-10-24
- Docs developers.circle.com/cctp · checked 2026-10-24
- Fee docs developers.circle.com/cctp/concepts/fees · checked 2026-10-24
Sources
- Circle CCTP v2 — interop protocol page — L2Beat · Database · checked
- CCTP fees — Circle · Docs · checked
- Circle CCTP — protocol page — DefiLlama · Database · checked
- DefiLlama Hacks database — DefiLlama Hacks · Database · checked
Changelog
- — Draft review written from L2Beat (CCTP v2) and Circle docs.
How do I cite this page?
Burn, A. / upswap.io (2026). Circle Cross-Chain Transfer Protocol (CCTP) review. Updated 2026-10-24. https://upswap.io/bridges/circle-cctp-fast#summary. CC BY 4.0. Accessed ____.
Stable anchors: #summary #type #risk #fee-structure #performance #tests #pros-cons #fit #incidents #official #sources #changelog #disclosure #cite
