Linea Bridge
The governance facts support rejection, though the proof system itself does not. Linea is ConsenSys’s zkEVM rollup, and its SNARK validity proofs give it a real advantage over every optimistic bridge in this registry: withdrawals clear in 2 to 12 hours rather than seven days, because there is no fraud-proof challenge period to wait out. But L2Beat’s own structured risk data states that contracts are instantly upgradable with a zero-second delay and that there is, in its own words, no window for users to exit in case of an unwanted upgrade. That is a worse governance rating than every other bridge reviewed in this registry, including the OP Stack chains and the already-rejected Lighter, both of which at least carry some standing delay or forced-exit backstop. Linea also has no sequencer-failure contingency today and has already shown the risk that combination creates. In June 2024, the Linea team unilaterally halted block production for about an hour during a third-party exploit, a real, not theoretical, use of discretionary control over the entire chain.
- A minimum standing delay, even 24 to 72 hours, is introduced between a Security Council upgrade approval and its execution
- A sequencer-failure or censorship contingency is implemented that does not require the current roughly-six-month proposer-freeze recovery path
- Security Council signer count and threshold are publicly confirmed and independently verifiable on-chain
- Twelve consecutive months with no unilateral, discretionary halt of block production by the Linea team or Association
Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-17.
The research file
Mechanism
A lock-and-mint canonical bridge pair uses Linea’s zkEVM message service. Deposits from Ethereum take about 20 minutes. Withdrawals take 2 to 12 hours because SNARK validity proofs remove the fraud-proof waiting period entirely. That is a real speed advantage over every optimistic-rollup bridge already reviewed in this registry.
Control and governance
L2Beat’s structured risk data states that contracts are instantly upgradable with a zero-second delay, and the exit-window field reads ”None: there is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable.” That is worse than every other bridge reviewed in this registry, including the zero-delay OP Stack chains. Those chains at least pair their upgrade path with a standing seven-day withdrawal window that exists independent of the upgrade mechanism. It is also worse than the already-rejected Lighter, which at least has a 21-day timelock, collapsible in an emergency, plus a 14-day forced-inclusion escape hatch. If Linea’s whitelisted proposer role fails, withdrawals freeze entirely, with only a theoretical roughly-six-month path to permissionless recovery. Upgrades execute through the Linea Security Council via a Safe multisig, but this review could not confirm the Council’s specific signer count or threshold from primary sources. The Linea Association, a Swiss non-profit, governs with a stated progressive-decentralization mandate, but the sequencer remains fully centralized today with no disclosed fallback for censorship or downtime.
Incident record
On 2024-06-02, a $6.8M exploit hit Velocore, a third-party DEX on Linea, not the bridge or core protocol itself. In response, the Linea team unilaterally halted block production for about an hour to contain fallout and censor attacker addresses. A single entity made a real-time, discretionary decision to freeze the entire chain. That drew public criticism, including from a competing rollup team’s chief executive, for contradicting Linea’s own decentralization claims. Linea also had a roughly one-hour network halt on 2025-09-10 whose cause was not confirmed in this review. No exploit of the bridge or message-service contracts themselves was identified.
Exit under stress
Normal-path withdrawals are fast, which is a real strength. The stress case is weak: the upgrade delay is zero-second, there is no exit window at all, and there is no sequencer-failure contingency. Linea has also shown that it will halt the chain through a unilateral, discretionary decision, so this is not merely a theoretical risk.
Comparison
Linea is faster than Base, Arbitrum, and Optimism’s canonical bridges on normal withdrawal timing, but weaker on the governance issue that drove those approvals. None of the three carry L2Beat’s ”None” exit-window rating, and none have a documented instance of a single entity unilaterally halting the chain. Lighter is also rejected in this registry. Linea’s Security Council multisig is a nominally broader body, but Linea’s complete lack of any exit window or sequencer-failure fallback arguably gives it a worse governance profile than Lighter’s, not a better one.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- L2Beat — Linea · primary · accessed 2026-08-17
Supports: exit window: None, zero-second upgrade delay, sequencer-failure risk, proposer-failure freeze mechanics, September 2025 halt - Linea Docs — bridge tokens to Linea · primary · accessed 2026-08-17
Supports: deposit and withdrawal mechanics - ConsenSys Diligence — Linea canonical token bridge audit · primary · accessed 2026-08-17
Supports: audit reference - Unchained — ConsenSys’ Linea briefly halts block production after $6.8 million Velocore DEX exploit · secondary · accessed 2026-08-17
Supports: June 2024 incident - CryptoSlate — Linea under scrutiny for unilateral block production halt amid Velocore hack · secondary · accessed 2026-08-17
Supports: governance-centralization criticism
Inherited controls
The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.
| Chain | Verdict | Control | Control constraint |
|---|---|---|---|
| Ethereum | Approved | No freeze key | No sequencer, no upgrade key, no operator who can be compelled. Rule changes require social consensus. |