CCIP's Router Pattern: Why a Single Immutable Contract Per Chain Is the Entire Security Bet

Short summary

This article examines Chainlink's CCIP on-chain architecture, explaining why cross-chain bridges lost $2.5B+ between 2021-2023 due to concentrated trust models. The Router contract serves as the single immutable entry point per chain while internal contracts like OnRamp, OffRamp, and Token Pools can upgrade without breaking integrations. The design separates commit and execution phases with Merkle proofs, curse checks, and fallback manual execution to guarantee message delivery.

• •Cross-chain bridges lost $2.5B+ from 2021-2023 due to flawed trust models, not blockchain tech itself
• •CCIP's Router is the only immutable, user-facing contract per chain; all other contracts are upgradeable and derived from it
• •OnRamp handles fee collection, validation, curse checks, and token lock/burn; OffRamp uses a two-phase commit-execute model with Merkle proofs

Generated with AI, which can make mistakes.