Jumper (LI.FI) review
Aggregator — routes your transfer through other bridges and DEXs via the upgradeable LI.FI Diamond contract
Key findings
Jumper is the consumer app of LI.FI, a bridge and DEX aggregator. The LI.FI API compares routes from bridges such as Across, Stargate, Relay, Mayan and NEAR Intents, and your transaction goes through the LI.FI Diamond — an upgradeable EIP-2535 contract with one facet per integration. You carry the risk of LI.FI's contract plus the bridge it picks. LI.FI's contracts were exploited through approvals in March 2022 and July 2024 (≈ $11.6M).
As of 3 Nov 2026, 11:35 UTC (run #540) our packet has no quotes attributed to Jumper (LI.FI), so there is not enough data for a price assessment. Real-money tests: none yet — planned after launch.
- 7-day coverage: rankable quotes on 0 routes in 0 of 336 runs (0 rows).
- Gas policy: Gas is shown per quote when the API returns it; ranking uses net received excl. gas.
- Real-money tests: none yet after launch
- Type: Aggregator — routes your transfer through other bridges and DEXs via the upgradeable LI.FI Diamond contract Risk card →
- Incidents: 1 see below
Source: upswap.io snapshot #540 · CC BY 4.0 · Zenodo DOI: Example / pending
How does Jumper (LI.FI) work?
The LI.FI API queries bridges, DEXs and solvers off-chain and returns a route. You sign one transaction to the LI.FI Diamond contract, which dispatches to the facet for the chosen bridge or DEX; the facet calls the underlying protocol, and an Executor/Receiver pair handles multi-step and destination-side actions (LI.FI docs).
LI.FI also runs its own intents marketplace (LI.FI Intents, built on the Open Intents Framework, with escrow-based input settlers on the source chain). On upswap it appears as a separate bridge row, "LI.FI Intents".
What are the risks of using Jumper (LI.FI)?
Each item links to its source (L2Beat, DefiLlama or official docs). Items we could not verify are marked 待核实. No overall score.
Upgrade authority
The Diamond is upgradeable by design: new facets can be added. On Ethereum its owner is the LiFiTimelockController, with a 3-hour minimum delay; only a 3-of-5 LI.FI Safe can schedule or cancel changes. A separate pauser wallet can pause the Diamond or remove a facet instantly, but cannot add one. LI.FI says every new contract, upgrade and material change is audited before deployment. Other chains not checked.
LI.FILI.FIBlockscoutLI.FI (GitHub)LI.FI (GitHub)Approval risk
Both LI.FI exploits drained wallets that had given LI.FI's contract large or infinite approvals; in 2024 the path was a newly added facet that did not validate calls. Approve exact amounts and revoke leftovers.
BlockSecCointelegraphUnderlying bridge
Your funds' safety in transit depends on the bridge LI.FI picks; see that bridge's own risk card.
LI.FISecurity incidents
16 July 2024: ≈ $11.6M taken from 153 wallets via GasZipFacet. March 2022: about $600K from 29 wallets in an earlier approval exploit.
BlockSecCointelegraphDefiLlama Hacks
What fees does Jumper (LI.FI) charge?
- Jumper fee
- Stable bridge/swap 0 bps; major-asset bridge/swap 2 bps; other assets 5 bps. Jumper
- LI.FI API fee
- LI.FI charges a 0.25% service fee per API transaction; integrators can add their own fee. LI.FI
- Underlying fees
- The chosen bridge's and DEX's own fees are included in the route. LI.FI
We send no integrator fee, but since 19 October 2026 we have seen LI.FI add a “LIFI Fixed Fee” of 0.25% to every route (already deducted from toAmount); we record it as an integrator fee. Jumper's own app fees are lower than this API fee.
How did its quotes perform in our data?
In run #540, LI.FI returned 1,013 quote rows on 38 routes, routing through 16 bridges; it supplied the cheapest $200 quote 1 times. Median cost of its rankable $200 quotes: 30.00 bps excl. gas.
| Bridge | Routes | $200 cheapest |
|---|---|---|
| Relay | 38 | 0 |
| Mayan FAST_MCTP | 34 | 0 |
| LI.FI Intents | 32 | 0 |
| Across | 28 | 0 |
| NEAR Intents 1Click | 26 | 0 |
| Layerswap | 25 | 0 |
| StargateV2 (Fast mode) | 21 | 0 |
| Circle CCTP (Fast) | 19 | 0 |
| Polymer (Fast) | 19 | 0 |
| Glacis | 18 | 0 |
| Polymer (Standard) | 18 | 0 |
| Squid | 9 | 0 |
| Symbiosis | 8 | 0 |
| Chainflip | 5 | 0 |
| GasZip | 2 | 0 |
| Hyperliquid Native | 1 | 1 |
Has upswap tested it with real money?
Not yet. Real-money tests are planned after launch; no test wallets or transactions are published yet.
What are the pros and cons?
Pros
- One quote compares many bridges and DEXs.
- Jumper's own fees are low (0–5 bps).
- Public audit reports and a bug bounty up to $1M.
Cons
- Adds an extra upgradeable contract layer on top of the bridge.
- Two approval-based exploits (2022, 2024).
- API quotes carry a 0.25% fee that direct bridge quotes don't.
Who is Jumper (LI.FI) for?
Convenient when you want one place to compare routes; for large amounts, check which bridge the route uses and consider going to that bridge directly.
Has it been hacked?
- — LI.FI · $11.6M · Token-approval abuse
The March 2022 LI.FI incident (≈ $600K) is not yet in our incident library.
Which official links are verified?
- Jumper app jumper.exchange · checked 2026-10-24
- Jumper fees docs.jumper.xyz/jumper-fees · checked 2026-10-24
- LI.FI docs docs.li.fi · checked 2026-10-24
- LI.FI security & audits docs.li.fi/introduction/learn-more/security-and-audits · checked 2026-10-24
What is still unverified?
- 待核实 Diamond ownership and timelock on chains other than Ethereum.
Sources
- LI.FI documentation index (architecture section) — LI.FI · Docs · checked
- Security and Audits — LI.FI · Docs · checked
- Fees and Monetization — LI.FI · Docs · checked
- Jumper fees — Jumper · Docs · checked
- LI.FI — interop protocol page — L2Beat · Database · checked
- Jumper — protocol page — DefiLlama · Database · checked
- DefiLlama Hacks database — DefiLlama Hacks · Database · checked
- Illicit fund flow case study: LI.FI attack (MetaSleuth) — BlockSec · Security firm · checked
- Li.Fi releases incident report following $11M hack — Cointelegraph · Media · checked
- LiFiTimelockController (owner of the LI.FI Diamond on Ethereum) — verified contract — Blockscout · Database · checked
- LiFiTimelockController — LI.FI (GitHub) · Official · checked
- EmergencyPauseFacet — LI.FI (GitHub) · Official · checked
Changelog
- — Draft review written from LI.FI and Jumper docs, BlockSec and Cointelegraph.
How do I cite this page?
Burn, A. / upswap.io (2026). Jumper Exchange and the LI.FI aggregation API review. Updated 2026-10-24. https://upswap.io/bridges/jumper-lifi#summary. CC BY 4.0. Accessed ____.
Stable anchors: #summary #type #risk #fee-structure #performance #tests #pros-cons #fit #incidents #official #sources #changelog #disclosure #cite