Move Value Across Chains.
Move tokens between blockchains in a single atomic transaction, verified by zero-knowledge proofs. Both sides settle together, or your assets auto-revert.
How a transaction settles
Declare intent
The user defines the asset, destination, and execution path. Permit2 removes the approve-then-swap pattern — one signature, one transaction.
Verify validity
A zero-knowledge proof confirms the swap can proceed without exposing sensitive details.
Lock both chains
Assets are locked on both chains using time-locked contracts.
Atomic settlement
Both sides are released together when conditions are met, preventing partial execution.
What goes wrong, and why you're still safe
Every guarantee is enforced at the smart contract level. The protocol is safe even when every external party is adversarial.
Non-Custodial Settlement
User funds remain locked in time-locked contracts and only move under predefined on-chain conditions. This is the same contract design used in Bitcoin's Lightning Network.
Verifier-Gated Execution
Settlement proceeds only after valid zero-knowledge proof verification on-chain. Invalid proofs cannot trigger execution.
Commit-Reveal Protection
Intent details are committed before execution parameters are exposed, reducing front-running and sandwich risk.
Automatic Refunds
If settlement does not complete, assets are reverted to the source chain automatically.
What we won't compromise on
Atomic or nothing
Both sides complete together or revert together. There is no partial state.
Your keys, your funds
The protocol facilitates. It never takes custody. Smart contracts are the only counterparty.
Prove, don’t trust
Every guarantee is cryptographic, not social. ZK proofs verify without exposing.
Common questions
Nothing bad. HTLC timelocks ensure both sides revert. Funds are automatically returned to the original sender after the timeout period. There is no state where funds can be lost.
No. The coordinator matches intents and relays messages. It never takes custody. Smart contracts are the only counterparty, and only for the duration of the swap.
Under 60 seconds from intent submission to final settlement. No optimistic windows. No bridge finality delays. Proof generation and HTLC settlement happen in parallel.
Testnet is live on Arbitrum Sepolia, Base Sepolia, and Midnight preview. Support for Celo, Optimism, and Zircuit is in development.
Fusion supports EVM-to-EVM, EVM-to-UTXO, and beyond. When chains don't share a common hash primitive, the protocol uses SHA256 hash functions to bridge chain families. This means an Arbitrum-to-Midnight swap works the same way as an Arbitrum-to-Base swap.
Cross-chain stablecoin movement, treasury rebalancing across L2s, RWA settlement between privacy and public chains, and programmatic agentic payments.