Company profileAnalytics / infrastructure

Arbitrum
Arbitrum is a family of Ethereum layer-2 networks, governed by the ArbitrumDAO, whose canonical bridge moves ETH and tokens between Ethereum and Arbitrum.
Also known as Arbitrum One · Arbitrum Bridge · ArbitrumDAO
The short answer
The bridge most people mean is the one at portal.arbitrum.io/bridge: deposits from Ethereum arrive in minutes, while withdrawals back to Ethereum wait out a dispute window of about 6.4 days. As of October 2026 DefiLlama shows about $3.29 billion held in the bridge contracts. The main caveats are that the Arbitrum Foundation runs the sequencer and a 9-of-12 Security Council can change the contracts in an emergency.
On this page
Key facts
as of 25 Oct 2026- What it issrc ↗
- Ethereum layer-2 networks: Arbitrum One (optimistic rollup) and Arbitrum Nova (AnyTrust)
- Official bridgesrc ↗
- portal.arbitrum.io/bridge (bridge.arbitrum.io redirects there)
- Withdrawal to Ethereumsrc ↗
- About 6.4 days (45,818-block dispute window), then a claim transaction on Ethereum
- Value in the canonical bridgesrc ↗
- About $3.29 billion (DefiLlama)
- DeFi value on Arbitrum Onesrc ↗
- About $1.45 billion (DefiLlama chain TVL)
- Stewardsrc ↗
- The Arbitrum Foundation, a Cayman Islands foundation company
- Sequencersrc ↗
- Run by the Arbitrum Foundation for Arbitrum One and Nova
- Emergency powerssrc ↗
- Security Council, 9-of-12 multisig with chain-owner powers
- Tokensrc ↗
- ARB, governance only; 10 billion total supply, about 6.89 billion circulating (CoinGecko)
- Bug bountysrc ↗
- Immunefi, up to $2,000,000, live since 31 August 2021
Who runs Arbitrum
- Legal name
- The Arbitrum Foundation (Cayman Islands foundation company)
- Where it operates
- Worldwide; the networks are public and permissionless
What Arbitrum is and who runs it
Arbitrum is a set of networks that process transactions off Ethereum and post the results back to it, so users pay less gas while Ethereum stays the place where disputes are settled. There are two production chains. Arbitrum One is an optimistic rollup that posts all of its transaction data to Ethereum. Arbitrum Nova uses the AnyTrust design, where a data availability committee holds the data and Ethereum is used only if the committee fails.
No single company owns the networks in the usual sense. The ArbitrumDAO, whose members vote with the ARB token, controls the chains' contracts and treasury through the process set out in its constitution. The Arbitrum Foundation, a Cayman Islands foundation company, acts as the DAO's steward: it funds development and grants, contracts service providers, oversees the DAO-approved chains and runs the sequencer. The DAO can elect or remove the Foundation's directors.
The core software, including the Nitro node, the SDK and the bridge tutorials, is published under the Offchain Labs organization on GitHub, which the Arbitrum docs link to. Offchain Labs is the company most associated with building Arbitrum; Offchain, Inc. is also listed as one of Nova's committee members.
ARB is a governance token. It is minted on Arbitrum One and lets holders vote on Arbitrum Improvement Proposals or delegate their votes. Gas on both chains is paid in ETH, not ARB. CoinGecko shows a total supply of 10 billion ARB and about 6.89 billion in circulation as of October 2026.
How the Arbitrum bridge works
The Arbitrum bridge is the canonical route between Ethereum and Arbitrum: a set of contracts on both chains, plus the web interface at portal.arbitrum.io/bridge. It does not rely on an outside group of signers to confirm transfers. A deposit is a message from Ethereum to Arbitrum; a withdrawal is a message from Arbitrum to Ethereum that only becomes final after the rollup's dispute window.
Deposits go through Ethereum's Inbox contract as so-called retryable tickets. ERC-20 tokens move through gateway contracts: most tokens use the standard gateway, which creates a matching token on Arbitrum automatically, while some issuers use a custom gateway. Arbitrum's docs say a deposit is processed on the child chain typically within a few minutes.
Withdrawals work the other way. Your tokens are burned or locked on Arbitrum, and a message waits in an Outbox until the state that contains it has been confirmed on Ethereum. On Arbitrum One that dispute window is 45,818 Ethereum blocks, about 6.4 days, and the keyword phrase "7 days" is a rounding of this. After it passes you, or anyone, sends one more transaction on Ethereum to claim the funds.
The canonical bridge connects Ethereum with Arbitrum chains only. Searches such as "Solana to Arbitrum", "BSC to Arbitrum" or "Polygon to Arbitrum" describe routes it does not serve; those need a third-party bridge or an exchange that supports both networks. Bridge aggregators also route through it: LI.FI's live tool list includes "Arbitrum Bridge" as one of its options. If you want a faster exit than 6.4 days, third-party bridges such as Across pay you out early and take the settlement wait on themselves, for a fee and with their own contract risk.
| Direction | Typical time | What you do |
|---|---|---|
| Ethereum to Arbitrum One or Nova | A few minutes | One transaction on Ethereum |
| Arbitrum One or Nova to Ethereum | About 6.4 days | One transaction on Arbitrum, then a claim on Ethereum |
Arbitrum bridge fees
The Arbitrum docs do not describe a separate bridge fee. What you pay is gas. A deposit costs Ethereum gas for the deposit transaction plus a small amount that pays for the retryable ticket and its execution on Arbitrum, which the SDK and the portal calculate for you. A withdrawal costs Arbitrum gas to start and Ethereum gas for the final claim, and the claim is usually the larger cost because it runs on Ethereum.
On Arbitrum One the gas price floor is 0.02 gwei and there is no need for a priority fee, because the sequencer orders transactions first come, first served and refunds any tip. Ethereum gas varies by the minute, so the cost of a deposit or a claim depends on when you send it. Third-party bridges and aggregators add their own fees on top of gas; the canonical route does not.
Is the Arbitrum bridge safe?
The bridge's security comes from the rollup's proof system, not from a committee of signers. On Arbitrum One, validation runs on the BoLD dispute protocol and is permissionless: the Foundation's own decentralization page says any node that implements BoLD can join. Anyone proposing a new state must post a bond of 3,600 ETH, and anyone who disagrees can challenge it during the dispute window. That window is why withdrawals take about 6.4 days.
Three trust points remain, and the Foundation lists them itself. First, the sequencer is run by the Arbitrum Foundation. It can delay a transaction by up to 24 hours or reorder transactions over short periods, but it cannot steal funds, and after 24 hours a user can force a transaction in through Ethereum. Second, the Security Council, a 9-of-12 multisig elected by the DAO in two cohorts, holds chain-owner powers and can act quickly in a critical emergency, including upgrading contracts. Third, Nova depends on a 5-of-6 data availability committee whose members are ConsenSys Software Inc., QuickNode, P2P.org, Google Cloud, Offchain, Inc. and Opensea Innovation Labs.
Ordinary upgrades go through the DAO. Under the constitution, a passed proposal that changes Ethereum-side contracts waits 8 days on Arbitrum, then at least one rollup challenge period, then 3 more days on Ethereum before it takes effect. The stated purpose is to give users who object time to withdraw.
The Arbitrum docs list security reviews by Trail of Bits and OpenZeppelin, the most recent dated 19 October 2026, and DefiLlama links a Quantstamp audit of the token bridge. An audit is a review at a point in time, not a guarantee. The Immunefi bug bounty pays up to $2 million and has been live since 31 August 2021. We found no record of an exploit of the canonical bridge contracts in the sources we checked. For a comparison with third-party bridges, see how the canonical route compares with other bridges.
Getting started and getting out
To bridge ETH from Ethereum to Arbitrum, open portal.arbitrum.io/bridge, connect a self-custody wallet such as MetaMask, choose Ethereum as the source and Arbitrum One as the destination, and confirm. Keep some ETH on Arbitrum for gas, because every later transaction there is paid in ETH. Check the exact URL before connecting: searches for "official Arbitrum bridge" are a common target for look-alike sites.
To leave, start the withdrawal on the same page. The portal shows a countdown, and after about 6.4 days the withdrawal becomes claimable in the transaction history tab, where you sign the claim on Ethereum. Funds are not credited until you claim. If you sent from another interface or lost track of a transfer, paste the transaction hash into the portal's history or its Retryable Tickets tool.
Two mistakes cannot be undone by the bridge. Sending tokens over Arbitrum to an exchange account that does not support Arbitrum may lose them; the FAQ says only the exchange can help. And some tokens exist in more than one version on Arbitrum. USDC, for example, appears as both USDC and USDC.e in bridge token lists, so check which one your wallet or exchange expects before you move it.
Support and official channels
Arbitrum's support desk takes requests through a form at support.arbitrum.io, and the community runs on Discord (discord.gg/arbitrum) and X (@arbitrum). Network status, including the sequencer, batch poster and validators for Arbitrum One and Nova, is published at status.arbitrum.io, which showed full uptime for August to October 2026.
No support agent will ask for a seed phrase or send a link to "fix" a withdrawal. A stuck deposit or withdrawal can be checked and finished by the user from the portal's transaction history with the original transaction hash, so a message offering to recover funds for you is a scam.
History
The Arbitrum bug bounty on Immunefi went live on 31 August 2021. Governance moved to the ArbitrumDAO with the ARB token, and the Foundation's bylaws in its public documents are dated July 2023. The older Classic technology was replaced by Nitro, which runs both production chains today.
Test networks have come and gone: Arbitrum Goerli was deprecated on 18 November 2023 and switched off on 18 March 2024, and the standalone Stylus testnet closed on 17 June 2024 once Stylus reached Arbitrum One. In August 2026 the DAO voted to extend Security Council terms to two years, starting with the March 2026 cohort. Audit work continues at a steady pace, with Trail of Bits reviews of ArbOS 60 and 61 in July 2026 and of gas parameters for Ethereum's Glamsterdam upgrade in October 2026.
Incident record
No recorded incidents since founding, checked 25 Oct 2026.
Questions people ask
Who owns Arbitrum?
No company owns the networks outright. The ArbitrumDAO, voting with ARB, controls the contracts and treasury, and the Arbitrum Foundation, a Cayman Islands foundation company, acts as its steward and runs the sequencer. The software is developed under the Offchain Labs GitHub organization. Emergency changes can be made by the elected 9-of-12 Security Council.
Can I bridge from Solana or BNB Chain to Arbitrum with the official bridge?
No. The canonical Arbitrum bridge only connects Ethereum with Arbitrum chains. To come from Solana, BNB Chain, Polygon or another network you need a third-party bridge or an exchange that supports both networks, and each of those adds its own fees and trust assumptions. Check the destination network and token version before sending.
Why is my Arbitrum withdrawal not in my wallet after a week?
A withdrawal to Ethereum is not paid out automatically. After the roughly 6.4-day dispute window you must sign a claim transaction on Ethereum, from the transaction history tab of the bridge portal, and pay Ethereum gas. Until that claim is sent the funds stay in the Outbox contract. Anyone can finish it with the original transaction hash.
Is Arbitrum Nova as secure as Arbitrum One?
Not quite. Nova's data is held by a 5-of-6 committee instead of being posted in full to Ethereum, and the Foundation notes that Nova's safety can break if five members collude with the sequencer. Validation on Nova is also permissioned. Arbitrum One posts all data to Ethereum and allows anyone to validate under BoLD.
Does using the Arbitrum bridge require KYC?
No. The bridge is a set of public contracts and a web interface that you use from a self-custody wallet, with no account or identity check. KYC applies only where the Foundation pays grantees or service providers. If you bridge through an exchange instead, that exchange's own rules apply.
Sources
- 01Arbitrum docs: chains overview
- 02Arbitrum docs: chain parameters
- 03Arbitrum docs: FAQ
- 04Arbitrum docs: withdraw tokens
- 05Arbitrum docs: deposit tokens
- 06Arbitrum docs: audit reports
- 07Arbitrum Foundation: what the Foundation is
- 08Arbitrum Foundation: state of decentralization
- 09Arbitrum Foundation: Security Council
- 10ArbitrumDAO constitution
- 11Arbitrum Foundation: ARB token
- 12DefiLlama: Arbitrum Bridge
- 13DefiLlama: Arbitrum chain
- 14CoinGecko: Arbitrum (ARB)
- 15Immunefi: Arbitrum bug bounty
- 16Arbitrum status page
- 17LI.FI API: tools list