Linea Bridge

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED ON GOVERNANCE, NOT ON THE PROOF SYSTEM. Linea is ConsenSys’s zkEVM rollup, and its SNARK validity proofs give it a genuine mechanism-level advantage over every optimistic bridge in this registry: withdrawals clear in 2 to 12 hours rather than seven days, because there is no fraud-proof challenge period to wait out. But L2Beat’s own structured risk data states contracts are instantly upgradable with a zero-second delay and that there is, in its own words, no window for users to exit in case of an unwanted upgrade — a worse governance rating than every other bridge reviewed in this registry, including the OP Stack chains and the already-rejected Lighter, both of which at least carry some standing delay or forced-exit backstop. Linea also has no sequencer-failure contingency today, and has already demonstrated the risk that combination creates: in June 2024 the Linea team unilaterally halted block production for about an hour during a third-party exploit, a real, not theoretical, exercise of discretionary control over the entire chain.

Kill criteria: the events that revoke this verdict
• A minimum standing delay, even 24 to 72 hours, is introduced between a Security Council upgrade approval and its execution
• A sequencer-failure or censorship contingency is implemented that does not require the current roughly-six-month proposer-freeze recovery path
• Security Council signer count and threshold are publicly confirmed and independently verifiable on-chain
• Twelve consecutive months with no unilateral, discretionary halt of block production by the Linea team or Association

The research file

Mechanism

A lock-and-mint canonical bridge pair backed by Linea’s zkEVM message service. Deposits from Ethereum take about 20 minutes. Withdrawals take 2 to 12 hours because SNARK validity proofs remove the fraud-proof waiting period entirely — a genuine speed advantage over every optimistic-rollup bridge already reviewed in this registry.

Control and governance

Per L2Beat’s structured risk data: contracts are instantly upgradable with a zero-second delay, and the exit-window field reads ”None — there is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable.” That is worse than every other bridge reviewed in this registry, including the zero-delay OP Stack chains, which at least pair their upgrade path with a standing seven-day withdrawal window that exists independent of the upgrade mechanism, and worse than the already-rejected Lighter, which at least has a 21-day timelock, collapsible in an emergency, plus a 14-day forced-inclusion escape hatch. If Linea’s whitelisted proposer role fails, withdrawals freeze entirely, with only a theoretical roughly-six-month path to permissionless recovery. Upgrades execute through the Linea Security Council via a Safe multisig, but this review could not confirm the Council’s specific signer count or threshold from primary sources. The Linea Association, a Swiss non-profit, governs with a stated progressive-decentralization mandate, but the sequencer remains fully centralized today with no disclosed fallback for censorship or downtime.

Incident record

On 2024-06-02, a $6.8M exploit hit Velocore, a third-party DEX on Linea, not the bridge or core protocol itself. In response, the Linea team unilaterally halted block production for about an hour to contain fallout and censor attacker addresses — a single entity making a real-time, discretionary decision to freeze the entire chain, which drew public criticism, including from a competing rollup team’s chief executive, for contradicting Linea’s own decentralization claims. Linea also had a roughly one-hour network halt on 2025-09-10 whose cause was not confirmed in this review. No exploit of the bridge or message-service contracts themselves was identified.

Exit under stress

Normal-path withdrawals are fast and a real strength. The stress-case picture is weak: zero-second upgrade delay with no exit window at all, no sequencer-failure contingency, and a demonstrated instance of unilateral, discretionary chain-halting rather than a merely theoretical risk.

Comparison

Faster than Base, Arbitrum, and Optimism’s canonical bridges on normal withdrawal timing, but weaker on the governance axis that actually drove those approvals: none of the three carry L2Beat’s ”None” exit-window rating, and none have a documented instance of a single entity unilaterally halting the chain. Against Lighter, also rejected in this registry, Linea’s Security Council multisig is a nominally broader body, but Linea’s complete absence of any exit window or sequencer-failure fallback is arguably a worse governance profile than Lighter’s, not a better one.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• L2Beat — Linea · primary · accessed 2026-08-17
  Supports: exit window: None, zero-second upgrade delay, sequencer-failure risk, proposer-failure freeze mechanics, September 2025 halt
• Linea Docs — bridge tokens to Linea · primary · accessed 2026-08-17
  Supports: deposit and withdrawal mechanics
• ConsenSys Diligence — Linea canonical token bridge audit · primary · accessed 2026-08-17
  Supports: audit reference
• Unchained — ConsenSys’ Linea briefly halts block production after $6.8 million Velocore DEX exploit · secondary · accessed 2026-08-17
  Supports: June 2024 incident
• CryptoSlate — Linea under scrutiny for unilateral block production halt amid Velocore hack · secondary · accessed 2026-08-17
  Supports: governance-centralization criticism

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.