Developer monitoring L2 rollup sequencer on laptop, transaction batch dashboard visible, late night home office with monitor glow, candid coding session.
Protocols

Arbitrum Bridge Protocol and Canonical L1 Contract Specifications

Canonical specification for the bridge's Delayed Inbox, Sequencer Inbox, and Outbox contracts on Ethereum. Essential for teams building custom bridge monitoring, designing withdrawal systems, or integrating with the 7-day fraud proof challenge period.
introduction
CANONICAL BRIDGE SPECIFICATION

Introduction

The definitive specification for Arbitrum's canonical L1 bridge contracts, defining the trust-minimized path for asset and message movement between Ethereum and Arbitrum chains.

The Arbitrum Bridge Protocol is the foundational security mechanism for moving assets and messages between Ethereum L1 and Arbitrum L2 chains. It is defined by a set of canonical L1 contracts—the Delayed Inbox, Sequencer Inbox, and Outbox—that collectively manage the lifecycle of cross-chain transactions. This specification is the primary reference for teams building custom bridge monitoring, designing withdrawal systems, or integrating directly with the bridge's 7-day fraud proof challenge period.

The bridge's security model is not based on a multisig or an external validator set, but on the same interactive fraud proof system that secures the Arbitrum chain itself. The Outbox contract enforces a mandatory delay on all L2-to-L1 withdrawals, allowing validators time to challenge an invalid state transition before funds are released on L1. This architecture creates a unique operational cadence where withdrawals are not instant but are trust-minimized. For integrators, this means correctly handling the lifecycle of a withdrawal from its initiation on L2, through the challenge period, to its final execution on L1 via a Merkle proof against the confirmed SendRoot.

Understanding the precise interface and behavior of the SequencerInbox for fast L1-to-L2 message inclusion and the Outbox for delayed L2-to-L1 execution is critical for any team operating a custom token bridge, a cross-chain governance system, or a high-value settlement application. A misalignment with the canonical bridge specification can lead to stuck transactions, failed governance votes, or, in the worst case, exploitable bridge logic. Chainscore Labs provides protocol impact assessments and integration audits to ensure custom bridge architectures correctly implement the canonical interface and handle all edge cases in the challenge and execution lifecycle.

CANONICAL BRIDGE CONTRACT SPECIFICATIONS

Quick Facts

Essential facts about the Arbitrum bridge's canonical L1 contracts, their roles, and operational implications for integrators.

FieldValueWhy it matters

Core L1 Contracts

Delayed Inbox, Sequencer Inbox, Outbox

These three contracts form the canonical bridge. Integrators must interact with them directly for trust-minimized deposits and withdrawals.

Delayed Inbox Role

Trustless L1-to-L2 message entry point

Bypasses the Sequencer to guarantee message inclusion after a delay. Critical for governance actions and censorship-resistant deposits.

Sequencer Inbox Role

Fast L1-to-L2 message entry point

The Sequencer reads batches from here. Messages are not force-included until after a delay, introducing a liveness dependency on the Sequencer.

Outbox Role

L2-to-L1 withdrawal execution

Spends L1 funds after a fraud proof challenge period. Integrators must execute withdrawals here, not on a separate bridge contract.

Challenge Period

Approximately 7 days

Withdrawals are delayed by this period to allow validators to prove fraud. This is the core security assumption for all assets exiting the system.

Fraud Proof System

Interactive bisection protocol

A single honest validator can defend the correct state. The security of the bridge depends on this system being live and functional.

Canonical vs Custom Gateways

Router-gateway pattern

The canonical token bridge uses this pattern. Custom gateways must conform to strict interfaces to avoid locking user funds or breaking composability.

Key Integration Risk

Incorrect Outbox execution

Failing to correctly generate and submit a Merkle proof against the Outbox's root will result in a permanently failed withdrawal. This logic must be audited.

technical-context
THE CANONICAL BRIDGE CONTRACT SYSTEM

Technical Mechanism and Contract Architecture

A precise breakdown of the Delayed Inbox, Sequencer Inbox, and Outbox contracts that form the trust-minimized bridge between Ethereum L1 and Arbitrum L2.

The Arbitrum bridge protocol is not a single contract but a system of canonical L1 contracts that collectively manage the flow of assets and messages between Ethereum and the Arbitrum rollup chain. The core components are the Delayed Inbox, the Sequencer Inbox, and the Outbox. The Delayed Inbox is a censorship-resistant path for L1-to-L2 messages, guaranteeing that any user can force-include a transaction on L2 after a time delay, even if the Sequencer is uncooperative. The Sequencer Inbox is the fast path, allowing the Sequencer to batch and order transactions immediately, which is critical for user experience but introduces a temporary liveness dependency on the Sequencer's good behavior.

On the L2-to-L1 side, the Outbox contract is the final arbiter of truth for withdrawals. It enforces the 7-day fraud proof challenge period, the core security guarantee of the Optimistic Rollup. When a user initiates a withdrawal on L2, the transaction is executed but not finalized on L1 until the challenge window closes. The Outbox accepts Merkle proofs of L2 transaction execution, which can only be confirmed after the dispute period, ensuring that a valid fraud proof would have had time to reverse any invalid state transition. This architecture creates an asymmetric trust model: L1-to-L2 messages are fast but rely on Sequencer liveness, while L2-to-L1 messages are slow but trust-minimized, inheriting Ethereum's security.

For teams building custom bridge monitoring, withdrawal systems, or integrating with the challenge period, understanding the exact interface and state machine of these contracts is non-negotiable. The interaction between the Sequencer's batch posting, the Delayed Inbox's force-inclusion mechanism, and the Outbox's proof verification defines the operational boundary of the system. A failure to correctly model the executeTransaction flow in the Outbox or to handle the delayed execution of retryable tickets from the Delayed Inbox can lead to stuck funds or integration failures. Chainscore Labs provides protocol impact assessments and integration reviews to ensure your system correctly implements the canonical bridge specification and handles edge cases like Sequencer downtime or challenge period transitions.

BRIDGE PROTOCOL IMPACT

Affected Actors

Bridge Integrators

Teams building custom bridges, gateways, or cross-chain applications on top of the canonical contracts must ensure strict compliance with the Delayed Inbox, Sequencer Inbox, and Outbox interfaces.

Key Actions:

  • Verify message inclusion proofs against the Outbox Merkle root construction.
  • Model the 7-day challenge period into your withdrawal finality logic; do not treat L2-to-L1 messages as final before the dispute window closes.
  • Account for the Sequencer Inbox's force-inclusion mechanism when designing censorship-resistant message paths.
  • Test retryable ticket lifecycle handling for L1-to-L2 messages, including auto-redemption failures and manual retry gas costs.

Chainscore can audit custom bridge implementations for correctness, proof generation logic, and failure recovery paths against the canonical specification.

implementation-impact
BRIDGE INTEGRATION REQUIREMENTS

Implementation and Integration Impact

The canonical bridge contracts define the security model for all assets moving between Ethereum and Arbitrum. Integrators must correctly handle the Delayed Inbox, Sequencer Inbox, and Outbox to avoid fund loss, failed messages, or incorrect finality assumptions.

03

Sequencer Inbox Trust Assumptions

The Sequencer Inbox allows the Sequencer to provide fast transaction confirmations but introduces a temporary trust assumption. The Sequencer can reorder or delay transactions before posting them as a batch to the Delayed Inbox on L1. For high-value or censorship-resistant applications, builders should design fallback paths that submit transactions directly to the Delayed Inbox. Monitoring the Sequencer's batch posting frequency is critical for detecting liveness failures.

04

Fraud Proof and Validator Operations

The bridge's security relies on the assumption that at least one honest validator is watching and can challenge invalid state transitions during the challenge period. Teams operating validators must ensure their infrastructure can construct and submit fraud proofs within the window. For BOLD, the dispute protocol changes to a deterministic game, requiring validators to update their operational playbooks. A failure to participate in validation directly weakens the bridge's security for all users.

05

Custom Gateway Security Review

The canonical token bridge uses a router-gateway pattern. Deploying a custom gateway for a token requires strict adherence to the standard interface and careful handling of the L1/L2 token relationship. A bug in a custom gateway can lead to permanently locked or double-spent tokens. Chainscore can audit custom gateway implementations to verify correct interaction with the canonical bridge contracts, proper access control, and robust handling of the challenge period.

06

Monitoring Bridge Contract Events

Operational safety requires monitoring key on-chain events: MessageDelivered on the Delayed Inbox, SequencerBatchDelivered on the Sequencer Inbox, NodeCreated and NodeConfirmed on the Rollup contract, and OutBoxTransactionExecuted on the Outbox. A drop in batch posting frequency or a halted challenge protocol are critical alerts. Chainscore can implement and run custom bridge monitors to provide early warning of liveness or security anomalies.

BRIDGE CONTRACT DEPENDENCIES AND FAILURE MODES

Risk and Compatibility Matrix

Evaluates the operational risks, trust assumptions, and compatibility requirements for systems interacting with the Arbitrum bridge's canonical L1 contracts (Delayed Inbox, Sequencer Inbox, Outbox).

Risk AreaFailure ModeAffected SystemsSeverityMitigation / Action

Sequencer Inbox Censorship

Sequencer selectively delays or excludes L1 transactions from the Delayed Inbox, preventing forced inclusion for a limited time.

CEX deposit flows, L1-to-L2 bridges, governance relayers

High

Monitor max transaction delay against the 24-hour forced inclusion window. Implement alerts if a user transaction is not included within a threshold.

Outbox Proof Validation

A custom bridge integration incorrectly validates a Merkle proof against the Outbox, accepting a fraudulent withdrawal.

Custom token bridges, cross-chain messaging apps, programmatic withdrawal systems

Critical

Do not reimplement proof verification logic. Use canonical Outbox.executeTransaction or rigorously audit custom proof validation against the latest ArbOS event format.

Fraud Proof Window (7-Day Delay)

A malicious or buggy L2 state commitment is finalized because no validator challenges it during the challenge period.

Exchanges processing withdrawals, liquidity providers, cross-chain arbitrage bots

Critical

Do not finalize L2-to-L1 messages as settled until at least 7 days after the assertion is confirmed on L1. Monitor active validator set health and dispute game activity.

Bridge Contract Upgradeability

The Security Council or DAO governance upgrades a core bridge contract (e.g., Sequencer Inbox) with a logic change that breaks integrator assumptions.

All bridge integrators, wallets, block explorers, indexers

High

Monitor the L1 UpgradeExecutor and Security Council multisig for queued transactions. Subscribe to Arbitrum DAO governance alerts for AIPs proposing bridge contract changes.

Retryable Ticket Gas Mispricing

An L1-to-L2 message fails auto-redemption because the submitted L2 gas limit or bid is insufficient, causing the ticket to expire.

Token bridges, governance cross-chain executors, user-facing dapps

Medium

Implement a robust retryable ticket monitoring service. Estimate L2 gas with a safety margin and use a gas bid that accounts for L2 congestion. Provide users with a manual redemption UI.

Delayed Inbox Bypass

A custom integration sends messages directly to the Sequencer Inbox, losing the censorship-resistance guarantees of the Delayed Inbox.

Applications requiring trust-minimized L1-to-L2 message inclusion

Medium

For high-value or censorship-resistant messages, always submit via the DelayedInbox.sendL2Message. Verify the integration path in your smart contract architecture.

Sequencer Feed Desynchronization

A node or service relying on the real-time Sequencer Feed falls out of sync, leading to stale data or missed transactions.

High-frequency trading bots, searchers, RPC providers, wallets displaying pending state

Medium

Implement a health-check that compares the latest feed sequence number with the confirmed L1 batch. Fail over to a redundant feed endpoint or fall back to standard RPC polling.

BRIDGE OPERATIONS READINESS

Integration and Monitoring Checklist

A practical checklist for teams integrating with the Arbitrum bridge contracts, building custom monitoring, or designing withdrawal systems. Each item identifies a critical verification step, explains its operational significance, and specifies the signal or artifact that confirms readiness.

What to check: Confirm that the Delayed Inbox, Sequencer Inbox, and Outbox contract addresses your system interacts with match the canonical addresses for the currently active ArbOS version on the target chain (Arbitrum One, Nova, or a specific Orbit chain).

Why it matters: Bridge contracts can be upgraded via governance or Security Council action. Integrating against a deprecated or incorrect address set can lead to silent failures in message delivery, fund loss, or inability to execute withdrawals.

Readiness signal: Your deployment configuration references a known, versioned contract address set that is verified against the official Arbitrum contract registry and matches the on-chain state at the expected block number.

Chains We Build On

Looking to build on a specific blockchain?

We build smart contracts, DeFi applications, wallets, tokenization platforms, and blockchain infrastructure across the major ecosystems teams choose today. That includes Ethereum, Arbitrum, Optimism, Polygon, Avalanche, Solana, Sui, Aptos, Hedera, Stellar, and NEAR, with support for additional EVM and non-EVM networks based on your product requirements.

EVM ecosystems

  • Ethereum logo
    Ethereum
  • Arbitrum logo
    Arbitrum
  • Optimism logo
    Optimism
  • Polygon logo
    Polygon
  • Avalanche logo
    Avalanche
  • Cronos logo
    Cronos

Non-EVM ecosystems

  • Solana logo
    Solana
  • Sui logo
    Sui
  • Aptos logo
    Aptos
  • Hedera logo
    Hedera
  • Stellar logo
    Stellar
  • NEAR logo
    NEAR

Additional ecosystems

  • Polkadot logo
    Polkadot
  • Cosmos logo
    Cosmos
  • TON logo
    TON
  • Cardano logo
    Cardano
  • Algorand logo
    Algorand
  • Tempo logo
    Tempo

Also available for Base, appchains, custom EVM networks, and cross-chain product architecture.

BRIDGE OPERATIONS AND INTEGRATION

Frequently Asked Questions

Common questions from teams building custom bridge monitoring, designing withdrawal systems, or integrating with the 7-day fraud proof challenge period.

A withdrawal from Arbitrum to Ethereum involves three distinct phases:

  1. Initiation on L2: A transaction on Arbitrum emits an event or creates a message in the Outbox. This transaction is included in an L2 block and the associated batch is posted to the Sequencer Inbox on L1.
  2. Assertion and Challenge Period: A validator asserts the L2 state containing your withdrawal on L1. The 7-day fraud proof challenge period begins. During this window, any honest validator can challenge an invalid assertion. The withdrawal is not final until this period expires without a successful challenge.
  3. Execution on L1: After the challenge period, you must submit a Merkle proof against the confirmed Outbox root to the Outbox contract on L1, which then executes the destination call.

Why this matters: Teams must not treat the L2 transaction confirmation as finality. Any system displaying a 'completed' status before the challenge period ends is misrepresenting the security model. Build monitoring that tracks the assertion event on L1, not just the L2 transaction.

Trusted by Industry Leaders

Delivering blockchain solutions for 5+ years.

We have partnered with 50+ leading DeFi protocols, NFT ecosystems, and fintech innovators to build secure, scalable, and capital-efficient blockchain products.

Selected Partners & Clients

ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
I've been working with Chainscore Labs for last 3+ years, they've consistently delivered with strong ownership across multiple projects. The team is reliable and detail-oriented.
L
Lee Erswell
CEO, Telos Foundation
how to get started

How to get started?

If you're looking for blockchain integration, ChainScore Labs has 5+ years of experience helping teams build and integrate exchanges, wallets, smart contracts, tokenization solutions, and protocol-connected products, we can help you choose the right path, integrate securely, and get to production faster. Our team consists of experienced blockchain developers and architects who can help you with your blockchain integration needs.

01

Exploration & Strategy

Define your product goals and choose the right blockchain architecture for your use case.

02

Architecture & Design

Design the smart contracts, tokenomics, and security parameters of your system.

03

Development & Integration

Build and integrate with wallets, oracles, and front-end dApps for a seamless experience.

04

Security & Launch

Comprehensive audits followed by a risk-managed mainnet deployment to protect your users.

Start a build

Need a blockchain engineering team?

Send the project context and we will respond with next steps, scope questions, and a practical path to delivery.