CCIP
Best for independently tracked protocol
How it rates
- Accounting methodology published
- $1,831m recorded independently
- No audit report linked in the public dataset at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- Not metIndependent audit report linked publicly
No audit report linked in the public dataset at this check.
defillama.com/protocol/ccip - Not met
- MetTracked by an independent analytics platform
Listed with published value and history.
defillama.com/protocol/ccip - Met
- MetApplication reachable at a public address
Reachable without an account at this check.
chain.link/cross-chain
- MetApplication reachable without an account
Reachable without an account at this check.
chain.link/cross-chain - MetProtocol economics published independently
Value and change history published.
defillama.com/protocol/ccip - Met
- PartialFee or reward model documented publicly
Application reachable for review; specific rates not captured at this check.
chain.link/cross-chain - MetNo account required to reach the application
Reachable without an account at this check.
chain.link/cross-chain
- Met
- Met
- Not met
- Met
- Partial
- Met
- Not met
- Met
- Met
- Met
- Met
- Met
- Not met
- Met
- Met
A cross-chain interoperability protocol from the dominant oracle provider, securing $1.83bn across 21 chains with a risk management network.
Our assessment
CCIP secures $1.83bn across 21 chains, built by the provider whose price feeds most of DeFi depends on. Its distinguishing feature is an independent risk management network monitoring transfers alongside the main protocol.
A second network watching the first
CCIP runs a separate risk management layer that independently validates cross-chain messages and can halt transfers if it detects anomalies. Most bridges have one verification path; a bug in it is a total failure. Requiring two independent systems to agree, with one empowered to stop the other, is the most robust structure available for a bridge.
Oracle experience is directly relevant
The operator has spent years running infrastructure where being wrong causes immediate, large, cascading losses. That operational experience — node operator management, monitoring, incident response — transfers directly to cross-chain messaging, which fails in similar ways.
No audit report at this check
No audit report was retrievable at a public address. That is a notable gap for a protocol whose entire value proposition is security architecture, and one that would be straightforward to close given the scrutiny the operator's other products receive.
Who it suits
CCIP fits institutions and applications wanting cross-chain transfers with defence in depth. End users typically encounter it inside an application rather than choosing it directly.
How rivals compare
| Service | Score | Best for | |
|---|---|---|---|
| Portal | 9.6 | audited protocol with published methodology | Read → |
Frequently asked
Does this score mean CCIP is safe?
No. It measures what an outsider can verify: linked audits, published methodology and independently recorded data. Contract and custody risk are not tested by us.
Where do these figures come from?
A public analytics dataset queried at the verification date, plus the audit reports it links. Anyone can re-run the query.
Why do some protocols score zero on audits?
Because no audit report is linked in the public record. It records what a user can reach, not a claim that no audit exists.