Bridging safely
Most losses in crypto come from avoidable mistakes, not exotic hacks. These habits keep your funds yours.
Verify the URL every time
Phishing sites copy real interfaces pixel for pixel. Before you connect a wallet, check the address bar and make sure you’re on the site you intended. Bookmark it and use the bookmark rather than clicking links from search ads, DMs, or emails.
Understand token approvals
To move an ERC-20 token, you first grant an approval that lets a contract spend it. You can approve a finite amount — just what you’re bridging — or an unlimited allowance. Unlimited approvals are convenient but risky: if that contract is ever compromised, the allowance can be drained.
The widget on this site requests finite approvals by default, and we don’t change that. There’s no reason to grant an unlimited allowance for a one-off bridge. It’s also worth periodically reviewing and revoking old approvals with a reputable allowance-checker tool.
Start with a test transfer
The first time you use a new route or a new receiving wallet, send a small amount and confirm it arrives where you expect. A few cents of gas is cheap insurance against sending a large balance to the wrong place.
Keep gas for arrival
You need the destination chain’s native token to transact once your funds land. If you bridge only a stablecoin, you may arrive unable to move. Bring a little native gas along, or use a route that delivers some on arrival — especially when moving into Solana, where you need a small amount of SOL for fees and account rent.
Common traps to avoid
- Fake support. No legitimate team DMs you first or asks for your seed phrase. Anyone who does is a scammer.
- Address poisoning. Attackers send tiny transactions from look-alike addresses hoping you’ll copy one from history. Always confirm the full address.
- Wrapped-token surprises. Confirm you’re receiving the canonical token on the destination chain, not a thin-liquidity wrapper.
Moving a large amount? Consider a hardware wallet
A hardware wallet keeps your private keys offline, so a compromised browser or a malicious approval can’t drain your funds on its own. It’s the single biggest security upgrade for anyone holding meaningful value on-chain.
Official links, provided for your security.
None of this requires being an expert. Slow down at the moments that matter — approving, confirming the destination, checking the URL — and Bridgeline handles the rest non-custodially. New to bridging? Start with how bridging works.