What is a Rollup Bridge?
A rollup bridge consists of the smart contracts that facilitate asset transfers between Ethereum mainnet (L1) and a Layer 2 rollup. These contracts hold deposited assets, process withdrawals, verify proofs or challenge periods, and enforce the security guarantees that make rollups trustworthy. The bridge is where rollup security ultimately materializes. It's the most critical infrastructure of any rollup.
How Rollup Bridges Work
Deposits work by sending assets to the L1 bridge contract, which locks them and emits an event. The rollup observes L1 events and credits equivalent assets on L2. This direction is typically fast. Limited only by L1 block confirmations and L2 sequencer processing time. Users see their funds on L2 within minutes.
Withdrawals work in reverse: users initiate withdrawal on L2, burning or locking their L2 assets. The rollup includes this in a batch posted to L1. For optimistic rollups, users must wait through the fraud proof challenge period (typically 7 days) before claiming funds on L1. For ZK rollups, withdrawal speed depends on proof generation and submission frequency. Minutes to hours typically.
Bridge Security
The rollup bridge contract is the most security-critical component of any rollup. It holds all deposited value (often billions of dollars) and implements withdrawal logic. Bugs in bridge contracts have led to catastrophic losses: Ronin Bridge ($625M), Wormhole ($325M), and others. These were third-party bridges, not canonical rollup bridges, but illustrate the stakes.
Canonical rollup bridges benefit from the rollup's security model. For ZK rollups, withdrawals require valid proofs. Mathematically impossible to fake. For optimistic rollups, the fraud proof window protects against invalid withdrawals. Unlike third-party bridges, canonical bridges inherit full L1 security guarantees.
Canonical vs Third-Party Bridges
Each rollup has one canonical bridge operated as core infrastructure. This bridge has the strongest security but may be slow (especially for optimistic rollup withdrawals). Third-party bridges (Hop, Across, Stargate, Synapse) offer faster transfers by fronting withdrawals and accepting challenge period risk themselves, charging fees for the service.
Third-party bridges are convenient but add trust assumptions and smart contract risk beyond the rollup itself.
Bridge Upgrades and Governance
Most rollup bridges are upgradeable during early stages, with upgrade authority protected by multisigs and timelocks. Understanding bridge upgrade mechanisms is crucial for assessing rollup security. Who can modify the bridge, and what protections exist.