
Synapse Review
MIT-licensed code and a documented optimistic relay network
of 10
Synapse scores 5.8 out of 10 in bridges, ninth of nine: MIT-licensed code, a 19-network chain list and a documented Intent Network that admits Synapse is its sole Guard. It publishes no fee figures, and its audit reports sit unlinked in a code repository. Desk research, checked November 6, 2026.
Routes
nUSD/nETH pools, CCTP for USDC, Synapse Intent Network (RFQ)
RFQ trust
Optimistic proofs with a dispute period; Synapse sole Guard and Canceler
Licence
MIT (sanguine); MIT SPDX headers in synapse-contracts
Chains
19 listed, including Ethereum, Arbitrum, Base, HyperEVM, Berachain
Audit files
Trail of Bits, Zellic (2), ChainLight, Aleph_v; uploaded Nov 2024–Feb 2025
Fees
No schedule; bridge fee built into the quote, plus origin gas
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (2.0 + 6.0 + 9.0 + 7.0 + 5.0) ÷ 5 = 5.8.
Pros
- Licence 9: MIT LICENSE on the sanguine monorepo; MIT SPDX headers on the bridge contracts
- Trust model 6: Intent Network escrow, proof, dispute period and Guard checks documented
- Weak point stated: Synapse is currently the sole Guard and sole Canceler
- Chain coverage 7: 19 networks listed with their tokens on the Chains & Tokens page
Cons
- Fee transparency 2: no rate, minimum or split published; the fee is only inside each quote
- Audit disclosure 5: reports by Trail of Bits, Zellic, ChainLight and Aleph_v are not linked from the docs
- Pool-route security is not explained beyond assets being moved to the destination chain
- No dispute-period or cancel-delay durations are published
How Synapse scores in bridges
This entry rates the Synapse Bridge in our bridge ranking. The bridge routes each transfer through liquidity pools (via nUSD and nETH intermediate tokens), Circle's Cross-Chain Transfer Protocol (CCTP) for USDC, or the Synapse Intent Network, a relayer request-for-quote (RFQ) system. The basis is desk research of the Synapse documentation and the synapsecns GitHub repositories, checked on November 6, 2026. No transfer was made. The category uses five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.
| Criterion | What the sources show | Mark |
|---|---|---|
| Fee transparency | No fee schedule, percentage or component breakdown. The docs say the bridge fee is built into each quote, and gas is charged at signing. | 2 |
| Trust model disclosure | The Intent Network is documented in full: escrow, relay, optimistic proof, dispute period, Guards and Cancelers. The docs name the weak point, that Synapse is currently the sole Guard and sole Canceler. The pool route's cross-chain verification is not explained, and no dispute or cancel durations are given. | 6 |
| Licence & code openness | The sanguine monorepo carries an MIT LICENSE file. The synapse-contracts repository, which holds the pool bridge, has no LICENSE file, but its Solidity sources carry MIT SPDX headers. | 9 |
| Chain coverage | The Chains & Tokens page lists 19 networks with their tokens, from Ethereum and Arbitrum to HyperEVM and Berachain. | 7 |
| Audit disclosure | Reports from Trail of Bits, Zellic (two), ChainLight and Aleph_v are published in the sanguine repository's assets folder, uploaded from November 2024 to February 2025. No documentation page lists them. One is marked draft, and their scope against the pool-bridge contracts is not stated. | 5 |
The overall score is the plain average: (2 + 6 + 9 + 7 + 5) / 5 = 29 / 5 = 5.8.
Three marks changed at this check, and the overall rose from 3.4 to 5.8. The earlier review could not render the documentation and found a 404 on the chains page. Both now load. Trust model disclosure rose from 2 to 6 for the Intent Network security pages. Chain coverage rose from 2 to 7 for the 19 networks on the Chains & Tokens page. Audit disclosure rose from 2 to 5 for the named reports in the sanguine repository.
Strongest criteria: licence and chain coverage
Licence & code openness scores 9. MIT is a recognised open-source licence, which the rubric places at the top. The mark stays one point short because the repository holding the pool-bridge contracts has no LICENSE file and relies on per-file headers. The category applies the same one-point deduction to Wormhole, whose Apache 2.0 licence is a short-form notice.
Chain coverage scores 7. The list is specific, with tokens per network, and includes newer EVM chains such as Unichain, World Chain, HyperEVM and Berachain. It is narrower than the lists of the leading peers, and the Bridge page's own "20+ EVM and non-EVM blockchains" does not match the 19 enumerated. The mark follows the list. The docs ask users to confirm in the bridge app that a specific pair has a route.
Weakest criteria: fees, audits and the pool route
Fee transparency at 2 is a deficiency. Synapse publishes no rate, no minimum and no split. Its own docs say only that the quote accounts for the bridge fee and that gas is collected when you sign. A reader cannot estimate the cost of a transfer before requesting a quote, which is the case the rubric scores lowest. Gas rebates and airdrops are mentioned, but not quantified.
Audit disclosure at 5 sits between disclosure and absence. The reports are real and name their firms, including a Trail of Bits comprehensive report and two Zellic assessments. They are filed in an assets folder of a developer monorepo, though, with no page in the docs pointing to them, no dates in most filenames and no mapping to the contracts that hold bridged funds. One ChainLight file is headed as a draft issue list. A reader who starts from the bridge cannot find this record.
Trust model disclosure at 6 is split by route. For the Intent Network, the docs set out what a Guard checks during the dispute period, what a dispute does, and that only Synapse runs Guards and Cancelers today. Unfilled deposits stay in escrow and can be cancelled permissionlessly after a longer delay. For the pool route, the Synapse Router page says only that assets are "moved to the destChain." It does not explain who attests the transfer or what secures nUSD and nETH.
What the score does not cover
- The brand change. synapseprotocol.com now redirects to hypercall.xyz/synapse, an options venue governed by the same DAO, while the bridge app, explorer and docs remain live at their own addresses. The rubric scores the bridge's documentation, not the brand's direction.
- Past incidents, which the category does not score unless the protocol documents them itself.
- Liquidity depth in the nUSD and nETH pools, and relayer competition on RFQ routes.
- Circle's own trust model on CCTP legs.
Our guide to how bridges work and why they are risky covers the pool and relayer failure modes in general terms.
Synapse vs Across and Squid
On current category marks, Across is sixth of nine at 7.2, Squid eighth at 6.0 and Synapse ninth at 5.8. Across runs the same optimistic relayer design as the Synapse Intent Network, and it scores higher on trust model (10 to 6), chain coverage (9 to 7), audits (8 to 5) and fees (5 to 2). Synapse leads it only on licence, MIT against Across's BUSL-1.1 (9 to 4). Squid splits the other way: it leads Synapse on fees (6 to 2), audits (8 to 5) and chain coverage (9 to 7), and trails it on trust model (5 to 6) and, badly, on licence (2 to 9).
Who this rating suits
The score is useful to a reader who values open code and wants to understand an optimistic relayer system with its single-operator caveat stated. It is weaker guidance for anyone who needs to know the cost of a transfer in advance or wants an audit record tied to the pool contracts. The rating is not a recommendation. On pool routes, check which intermediate token a transfer uses before signing, since sudden slippage can deliver nUSD or nETH instead of the token requested.
How it compares

Axelar
Open-source code and the deepest dated audit archive among bridges

Wormhole
A numbered guardian quorum and a deep, named audit record

Celer cBridge
Open-source contracts with a stated fee range and threshold

deBridge
Per-chain flat fees and a dated audit archive

Chainflip
Native-asset swaps with a published custody threshold and fee table

Across
The clearest statement of a bridge's security assumption

Stargate / LayerZero
Broad chain list and named audits at every protocol stage

Squid
Named, linked audits and wide chain coverage for routed swaps
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Synapse docs: Synapse Intent Network — checked
- 2.Synapse docs: Intent Network security — checked
- 3.Synapse docs: Canceling — checked
- 4.Synapse docs: Synapse Router — checked
- 5.Synapse docs: Chains & Tokens — checked
- 6.Synapse docs: Transaction support — checked
- 7.Synapse GitHub: sanguine LICENSE (MIT) — checked
- 8.Synapse GitHub: sanguine audit reports folder — checked
- 9.Synapse GitHub: synapse-contracts — checked
Frequently asked questions
Why does Synapse score 5.8?
It is the plain average of five equal marks: fee transparency 2, trust model disclosure 6, licence 9, chain coverage 7 and audit disclosure 5. That places it ninth of nine, just behind Squid at 6.0.
What changed since the previous Synapse review?
The overall rose from 3.4 to 5.8. The docs now render, so the Intent Network security pages lifted trust model from 2 to 6 and the 19-network list lifted chain coverage from 2 to 7. Audit reports found in the code repository lifted audits from 2 to 5.
What holds Synapse's score back?
Fees, mostly. Synapse publishes no rate or breakdown, so the cost is only visible in a quote. Its audits are real but unlinked from the docs, and the pool route's security is not explained.
Is Synapse still a bridge after the move to Hypercall?
Yes. synapseprotocol.com redirects to hypercall.xyz, but the bridge app, explorer and documentation still load at their own addresses, and the routes page lists 19 networks.
How does Synapse compare with Across and Squid?
At this check, Across reads 7.2, Squid 6.0 and Synapse 5.8. Across uses a similar relayer design and documents it more fully. Synapse leads both on licence and trails both on fees.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.