Wormhole
Executive Summary
The most important bridge you've probably never thought about. If you've moved money between Ethereum and Solana, you've used Wormhole. The 2022 hack — fully repaid by Jump — remains the elephant in the room.
"Wormhole is essential infrastructure for the non-EVM world."
Key Advantages
- ✓Unmatched non-EVM chain coverage: Solana, Aptos, Sui, Near, Cosmos are all first-class
- ✓Native Token Transfers (NTT) framework is competitive with LayerZero's OFT standard
- ✓19 Guardian nodes include major institutional validators — Jump, P2P, Everstake — with reputational stakes
- ✓Portal bridge UI is simple and battle-tested for common EVM↔Solana transfer routes
- ✓The $320M exploit was fully repaid — no user ever lost funds
Major Trade-offs
- ×Security depends on 19 identifiable entities not colluding — 13/19 threshold is a known attack surface
- ×History of a $320M exploit erodes trust, regardless of the remediation
- ×Wrapped asset bridging creates honeypots: large pools of wETH on Solana are persistent targets
- ×Manual redemption on the destination chain is still required for some routes — an annoying UX friction
Bridge to Any Chain
Multi-hop bridging across 20+ chains. Best route, best rate, fully non-custodial.
/ Operational Metrics
| Network Architecture | Omnichain (EVM + Solana, Aptos, Sui, Near, Cosmos) |
| Launched | 2021 |
| Native Token | W |
| KYC Requirement | No KYC (Permissionless) |
| Total Value Locked | N/A |
| 24h Volume | N/A |
/ Architecture & Mechanics
Wormhole connects blockchains that were never designed to talk to each other: EVM networks, Solana, Aptos, Sui, Near, Cosmos. That non-EVM coverage is Wormhole's irreplaceable moat. When Solana's ecosystem exploded in 2021 and again in 2023-24, Wormhole became the primary on-ramp for EVM capital. The protocol uses 19 Guardians — a fixed validator set composed of major blockchain infrastructure operators — who observe cross-chain events and sign collective attestations (VAAs, Verifiable Action Approvals). A 13/19 threshold is required to verify any message. This model is simpler than LayerZero's DVN approach and arguably more predictable, but it means the security model depends entirely on the integrity and availability of these 19 entities.
When a transaction occurs on a source chain, all 19 Guardians independently observe the event. Once 13 of 19 have signed, the resulting VAA (Verifiable Action Approval) can be submitted to the destination chain's Wormhole contract. That contract verifies the Guardian signatures and executes the corresponding action — typically releasing or minting tokens. Native Token Transfers (NTT) improves on this by burning and minting token supply rather than locking in bridge contracts, eliminating wrapped asset honeypots for protocols that adopt the standard.
/ Fee Schedule
Network Fee
Destination chain gas only
Bridge Protocol Fee
None at the Wormhole level
Portal Frontend Fee
None (relayer fees may apply for automatic delivery)
/ Risk Assessment Matrix
Vector
Guardian Collusion / Compromise
Severity
Analysis
A 13/19 Guardian compromise would allow fabrication of any cross-chain message. While each Guardian is a reputable entity, they are known and targetable — both legally and technically.
Vector
VM Bridge Attack Surface
Severity
Analysis
Bridging between fundamentally different VMs (EVM and SVM) requires complex adapters. The 2022 hack exploited a verification flaw in the Solana-side contract. Analogous bugs in the Aptos or Sui adapters remain a residual concern.
Vector
Wrapped Asset Concentration
Severity
Analysis
Large pools of Wormhole-wrapped ETH on Solana represent high-value, static targets. Any exploit of the bridge could drain these pools — a risk that exists as long as wrapped assets exist.
Regulatory & Legal Caveats
Bridges present a challenging regulatory profile — they move value across borders with no AML controls, which regulators increasingly want to address. Wormhole's Guardian set includes identifiable, regulated entities, which increases both the compliance surface and the potential for regulatory pressure or compelled shutdown. The W token airdrop and governance structure face standard securities scrutiny. The 2022 exploit, while remediated, may create ongoing legal exposure in jurisdictions that hold bridge operators to custodial standards.
/ Wormhole vs LayerZero: Fees & Security Compared
Fees. Neither protocol charges a meaningful protocol-level toll — the cost of a transfer is dominated by destination-chain gas plus relayer/execution overhead, and on liquidity routes, by the pool pricing of the app built on top (Portal on Wormhole, Stargate on LayerZero). In practice the fee difference between the two stacks on a like-for-like route is small and route-dependent; what actually moves your cost is which chains you're bridging between and how deep the liquidity is on that specific route. For EVM↔EVM transfers, Stargate's deeper pools usually mean better effective pricing; for EVM↔Solana/Aptos/Sui, Wormhole routes are often the only ones with real depth, which is a stronger argument than any fee table.
Security. The architectures are genuinely different. Wormhole uses one fixed verification set: 19 named Guardians, 13 of which must sign every message — simple, auditable, and predictable, but a single shared attack surface for every app on the network. LayerZero instead lets each application configure its own security stack (DVNs — decentralized verifier networks), so security is composable but heterogeneous: a well-configured LayerZero app can be more robust than Wormhole's fixed set, while a lazily configured one can be weaker, and as a user you rarely see which one you're getting. Wormhole's 2022 exploit was an implementation bug in the Solana adapter (fully repaid by Jump, patched since), not a failure of the Guardian model itself.
Bottom line: choose by route, then by trust model. If Solana or another non-EVM chain is on either end, Wormhole — ideally via NTT-native tokens — is usually the right answer. For EVM-to-EVM, LayerZero/Stargate offers more routes and liquidity, at the cost of a security model that varies per application. See our full LayerZero review for the other side of this comparison.
Target Demographic
Users who need to move capital between Ethereum and Solana (or other non-EVM chains) where no alternative route exists. Protocols building cross-chain applications that need to span EVM and non-EVM networks. Users comfortable with bridge risk who are making short-duration transfers — not a long-term storage solution.
/ Execution Protocol
Navigate to Portal Bridge
Portal (portalbridge.com) is Wormhole's primary user-facing bridge UI. For EVM-to-EVM transfers, tools built on LayerZero are often simpler. Portal's real strength is EVM↔Solana and EVM↔non-EVM routes.
Connect both wallets
You will need both your EVM wallet (MetaMask, Rabby) and your destination wallet (Phantom for Solana) connected simultaneously. This is an unusual UX — have both wallets installed before starting.
Select asset and route
Choose the source chain, destination chain, and the asset to transfer. Be aware you may receive a wrapped version of the asset on the destination chain (e.g., Wormhole-wrapped ETH on Solana, not native ETH).
Manually redeem if required
Some Wormhole routes require you to submit a second transaction on the destination chain to complete the transfer. If using automatic relayers, this happens for you. Check the transfer status on the Wormhole explorer before assuming funds are lost.
/ Alternatives to Wormhole
Across Protocol
8.3The fastest credible way to move major assets between EVM L2s. Across uses bonded relayers who front you the destination asset in seconds, then reconcile against an optimistic oracle. Fast and cheap — at the cost of relayer and oracle assumptions.
LayerZero
8The dominant cross-chain messaging standard. Most users never interact with LayerZero directly — they use the dozens of apps built on top of it without knowing it. That's what becoming infrastructure looks like.
How Protocol Signal Reviews Work
First-hand testing
Every protocol is actively used by our analysts with real on-chain capital before review.
Exploit history disclosed
We name every historical exploit, audit gap, and oracle risk — not just the marketing talking points.
Canonical links only
All app links are verified daily against the protocol's official channels to defend against phishing clones.
Referral-transparent
We earn referral fees from some links at no extra cost to you. Rankings are never paid — they reflect analyst opinion.
Final Verdict
"Wormhole is essential infrastructure for the non-EVM world. The 2022 exploit is a permanent part of its history and warrants respect as a risk signal — not dismissal. The key improvement in recent years is NTT, which eliminates wrapped honeypots for protocols that adopt it. If you're bridging EVM↔Solana in meaningful size, Wormhole with NTT-native tokens is materially safer than old-model wrapped asset bridging. Proceed with the same level of caution you'd apply to any bridge: don't leave funds sitting, transfer and move on."
Frequently Asked Questions
What actually happened in the 2022 hack?
A signature verification flaw in the Solana-side Wormhole contract allowed an attacker to mint 120,000 wETH (worth $320M at the time) without depositing any collateral on Ethereum. Jump Crypto, a major backer, replaced the funds within 24 hours to protect the Solana ecosystem. The vulnerability was specific to the Solana adapter and has since been patched.
What is a VAA?
A Verifiable Action Approval is the signed message that Guardians produce after observing an on-chain event. It contains the message data and the signatures of the Guardians who witnessed it. The destination chain contract verifies these signatures before taking action — it's the cryptographic proof that something happened on the source chain.
How is NTT different from normal Wormhole bridging?
Traditional bridging locks tokens on the source chain and mints wrapped equivalents on the destination. NTT burns the token on the source chain and mints it natively on the destination — the protocol controls its own supply on every chain. This eliminates the wrapped asset honeypot and gives users a better asset (native vs. wrapped).
Should I use Wormhole or LayerZero?
For EVM-to-EVM transfers, LayerZero's ecosystem (via Stargate) is generally preferable — more chains, more apps, more liquidity. For anything involving Solana, Aptos, or Sui on one end, Wormhole is often the only viable option with meaningful liquidity. The choice is often made by the available routes rather than protocol preference.
Live Data
Compare Wormhole
See how it stacks up against the competition.
View Comparison TableBridge infrastructure research →