Cross-Chain Messaging evaluated across the message trust model, the security each application can configure, forged and stuck message record, and cost per message.
Ranked here: cross-chain messaging protocols, which carry application messages between chains so that your contracts can act on a message from another chain. Not ranked here: asset bridges and single-asset transfer protocols that carry no application messages (Wormhole does both and is ranked on both pages), and protocols whose trust model could not be verified.
#1 of 7 · published ranking
Hyperlane
80ChainChoice Score
4199
Why it leads
Hyperlane is 5 points ahead of Union, mainly because it scores higher on its security configurability and its cost per message.
Show the arithmetic
Ahead of Union on security configurability (+3.1 points) and cost per message (+2.8 points)
Cost
Not priced· No comparable price is published
ReviewedNext review by Published Methodology v2026.11.1
How this page is reviewed
Reviewed means every product ranked on this page was read against its sources on or after that date; every ranked category is re-read at least every 45 days. Models research, extract and parse. A deterministic engine ranks. Every quote passes an adversarial refute pass.
No provider can pay for a position in this table. The code that computes this order cannot read which links carry a referral code, and every build proves it. Every score below rebuilds from the published criteria.Ranking v2026.11.1 · 4 criteria · 7 products · same inputs, same order
How we review · 7 ranked of 10 assessed · 4 criteria · 0 sponsor weight
How we review
7ranked
10assessed
4criteria
0sponsor weight
Recommendation first, comparison only if needed.
Reviewed and rechecked on the current cycle.
Commercial relationships disclosed before clickout.
Personal comparison
Cross-Chain Messaging ranked comparison
No comparable price is published; ranking still uses verified product evidence.
RankProviderBest fitScore
1
HyperlanePermissionless messaging where each app...Top ranked
Application configurable security — 9/10Trade-off: The default ISM looks like layered security and is not. Reading it top to bottom at b...
80score
Check availability for your country
Hyperlane · hyperlane.xyz. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
2
UnionIBC-compatible messaging routed through...
Application configurable security — 7/10Trade-off: The light clients do not remove the committee; they move it to Union's own chain. Eve...
75score
Check availability for your country
Union · union.build. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
Forged and stuck message record — 7/10Trade-off: The security page describes the quadratic-voting design but, as loaded and word-searc...
74score
Check availability for your country
Axelar (General Message Passing) · axelar.network. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
4
LayerZero V2Omnichain messaging protocol in which e...
Application configurable security — 9/10Trade-off: The protocol's greatest strength and its worst loss are the same feature, and the ven...
73score
Check availability for your country
LayerZero V2 · layerzero.network. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
5
CHChainlink CCIPCross-chain messaging run by Chainlink...
Forged and stuck message record — 8/10Trade-off: CCIP is still sold on the Risk Management Network as an independent second layer, and...
69score
Check availability for your country
Chainlink CCIP · chain.link. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
6
WormholeGeneric message passing secured by a fi...
Message trust model — 6/10Trade-off: Two things a buyer would regret discovering late. First, the Standard Relayer is depr...
66score
Check availability for your country
Wormhole · wormhole.com. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
1 more assessed and ranked below — none of them hidden for commercial reasons.
Ranked on 4 published criteria weighted 35/25/25/15, which set goal alignment — 30 of the 86 points. The rest: regional access 20 (constant here), evidence depth 18 (constant here), ease of use 10 (constant here), institutional trust 8 (constant here). Profile match is shown in breakdowns but carries no weight.
How you can lose money here, and what the ranking scores
Verification failure: an invalid state or transfer is accepted.
Scored by Message trust model · 35% (Hyperlane 5/10, Union 6/10, Axelar (General Message Passing) 6/10)
Scored by Application configurable security · 25% (Hyperlane 9/10, Union 7/10, Axelar (General Message Passing) 4/10)
Scored by Forged and stuck message record · 25% (Hyperlane 7/10, Union 6/10, Axelar (General Message Passing) 7/10)
Not assessed by this ranking: Contract failure, Control failure, Liveness failure, Regulatory failure, Execution failure, Exit failure. A high place says nothing about these; the Methodology tab says what each means.
Also scored, as cost, quality or a summary of several families: Cost per message (15%).
Audit
Infrastructure
Methodology
2026.11.1
published 10 November 2026
Providers tracked
860+
across 121 categories
Last verified
28 September 2026
newest dated pricing or sentiment read
Named on the roster
2 people
managing directors · 6 automated processes
Decision guide
What matters most before choosing in this category
Weighted on who has to be honest for a message to be believed (35), how much of that an application can configure for itself (25), the record of forged and stuck messages (25), and what a message costs (15). Configurability carries a quarter of the weight because in this category the shipped default and the recommended configuration are different things, and the gap is where the money went: one vendor writes that if an application points to the defaults "then you are fully reliant on the LayerZero Labs multisig", and that this path is "intended to be for testing only and should not be used for production applications". Cost carries the least because it does not track security — identical work spans 49.8x across this pool, and the dearest protocol has the smaller verifier set of the two extremes.
For a message to be believed by your contract, exactly who has to be honest — and how many of them?
Is that set the shipped default, or something you configured and can change?
When this protocol has failed, did it forge a message or merely stop delivering them?
Current engine lead
The #1 overall and the scoring weights
HyperlaneData checked Sep 2026
Permissionless messaging where each application chooses an Interchain Security Module contract that decides which messages it will accept.
Permissionless messaging where each application chooses an Interchain Security Module contract that decides which messages it will accept. Strongest on application configurable security (9/10): An application can keep the Mailbox default or deploy its own Interchain Security Module, which is arbitrary contract code. The default it inherits is weaker than its options: three signatures from one set of five validator keys, behind nesting that adds no independence. Weakest on message trust model (5/10): The Ethereum default for Arbitrum-origin messages resolves to two multisigs that each need 3 of the same 5 validator addresses, readable on chain. The default module was replaced on 1 September 2026 with the same shape and one rotated key. Published price: "originFee = exchangeRate * destinationTxCost", where "The gasLimit and the exchangeRate are configured by the message sender and the Relayer, respectively." (docs.hyperlane.xyz interchain gas payment documentation, fetched 28 September 2026).
Best forApplication configurable security — 9/10
Main tradeoffThe default ISM looks like layered security and is not. Reading it top to bottom at block 25,709,399 on 8 August 2026 gives a 2-of-2 aggregation over a routing module and a second module of type 6, then for Arbitrum origin a 1-of-2 aggregation over two multisigs — and both multisigs are 3-of-5 over the same five validator addresses. Three signatures from one set of five keys is the true default. If you rely on Hyperlane's modularity as a security argument, you have to actually deploy your own ISM; inheriting the default buys you the nesting without the independence.
Verify before signup"originFee = exchangeRate * destinationTxCost", where "The gasLimit and the exchangeRate are configured by the message sender and the Relayer, respectively." (docs.hyperlane.xyz interchain gas payment documentation, fetched 28 September 2026). Measured: Mailbox at 0xc005dc82818d67AF737725bD4bf75435d065D239, quoteDispatch() for a 32-byte body to destination domain 42161 (Arbitrum One), re-executed on 28 September 2026 at Ethereum block 25,709,399, returned 51,575,044,905,397 wei, identical to the wei to the 8 August 2026 read; arithmetic at the DefiLlama ETH price of 1,918.87 USD for 2026-08-08T09:37:50Z: 0.000051575044905397 x 1,918.87 = 0.0990 USD. The same call at block 26,074,794 (2026-09-28T08:35:47Z) returned 36,911,265,441,204 wei; arithmetic at the DefiLlama ETH price of 2,645.36 USD for 2026-09-28T08:36:50Z: 0.000036911265441204 x 2,645.36 = 0.0976 USD.
Weighted criteria
Message trust model35%
Application configurable security25%
Forged and stuck message record25%
Cost per message15%
Methodology
How this category is reviewed
Reviewed on message trust model, application configurable security, forged and stuck message record, and cost per message.
The order on this page is the published ranking for this category. Every criterion, weight and source behind it is on the methodology page.
Frequently asked
Questions people ask before choosing messaging
What actually verifies a message here?
A named set of signers in every case except one, and the counts are usually not on the security page. Reading the Ethereum contracts on 2026-08-08: LayerZero's SendUln302 returned four required DVNs for the default config, which its vendor separately describes as a testing path. Hyperlane's defaultIsm() looks nested and is not — a 2-of-2 aggregation whose routing branch for origin 42161 is a 1-of-2 aggregation, and whose two children, a message-id multisig and a merkle-root multisig, both return validatorsAndThreshold() of 3-of-5 over the identical five addresses. Satisfying either branch takes three signatures from the same five keys, so the second branch adds a proof format rather than a second opinion. Axelar publishes no numeric quorum at all, so the concentration had to be computed: of 151 validators returned by its own API, 48 are bonded, and 21 of those reach 60% of square-root-weighted voting power. Quadratic voting does widen the collusion set here — by three entities.
Does the marketing match what the contracts do?
Twice in this pool it does not. Chainlink still sells CCIP on an independent Risk Management Network, while its own architecture documentation states that "the Risk Management Network's automated offchain role is no longer active in current CCIP deployments" — what remains is a manual switch held by one party, invoked when "the CCIP Owner manually initiates a curse". The same page publishes no quorum for the oracle networks doing the actual verifying. Wormhole's Standard Relayer is deprecated and still reports destinations as supported while quoting nothing for them: at Ethereum block 25,709,399 its relayer returned a native price quote of 0 for Arbitrum, Base, BNB Chain, Polygon and Optimism at both 200,000 and 2,000,000 gas, and its default delivery provider returned isChainSupported(23) true with quoteGasPrice(23) and quoteDeliveryOverhead(23) both 0.
Does paying more buy a stronger guarantee?
No, and the spread is large enough to make that worth saying plainly. For a 32-byte payload from Ethereum to Arbitrum with a 200,000 gas limit, quoted at block 25,709,399: Axelar $0.0385, LayerZero $0.0923, Hyperlane $0.0990, Chainlink CCIP $0.5379, deBridge $1.9189 — a 49.8x spread for identical work. The most expensive of those two extremes has the smaller verifier set and the cheapest has one of the largest, so a buyer paying fifty times is not buying fifty times the honest-party requirement. One caveat the research states about itself: Union, the only light-client design here and the strongest trust model in the set, exposed no Ethereum quoting function and its published mainnet RPC returned HTTP 503 on two attempts, so the trust-minimised option is also the one a buyer cannot yet budget.
What did the April 2026 failure actually change?
It priced the trust model. The attack forged verification rather than exploiting a contract, and the vendor accepted fault in writing. Within three weeks the affected issuer had moved its bridge to a competing protocol and a second issuer said it was migrating more than $700 million of tokenised bitcoin infrastructure away from the same vendor. That is why the forged-and-stuck record carries the same weight here as configurability: a protocol that has stopped delivering messages has cost its users time, and a protocol that has delivered a false one has cost them the balance.
Reviewed28 September 2026Method4 criteriaCategorycross_chain_messaging
Not financial advice · For informational purposes only · Always do your own research
