Hop Protocol is a token bridge for transferring assets between Ethereum rollups and Layer 2 networks, described in a 2021 whitepaper by Chris Moody. The core challenge Hop addresses: optimistic rollup exits take 7 days (the fraud proof challenge window). A user withdrawing ETH from Arbitrum to Ethereum must wait a week if using the canonical bridge.

Hop’s solution: introduce hTokens (synthetic bridge tokens) and Bonders (capital providers) who front liquidity on the destination chain immediately, absorbing the 7-day wait themselves in exchange for a fee.

> Whitepaper (PDF): hop.exchange/whitepaper.pdf

---

Publication and Context

Hop launched in July 2021, shortly after Arbitrum’s public mainnet (August 2021) and Optimism’s earlier limited mainnet (January 2021). The 7-day optimistic rollup exit problem was immediately apparent: users wanting to move assets between rollups or from rollup to Ethereum faced impossible UX without a faster path.

Competing approaches at the time:

• Liquidity networks (Connext, Celer cBridge): Pool-based liquidity; fast but capital-inefficient for large transfers
• Centralized bridges (Multichain/Anyswap): Trusted third-party custody; fast but custodial risk
• Canonical bridge: Trustless but 7-day wait for optimistic rollups

Hop’s innovation was the hToken + AMM at every rollup design, which optimizes for trustless speed while remaining capital-efficient.

---

hTokens: Synthetic Bridge Tokens

For each bridged asset (e.g., USDC), Hop deploys an hToken (e.g., hUSDC) on every supported network:

• hUSDC is a synthetic representation of USDC that can be minted/burned by the Hop bridge contracts
• The bridge maintains 1:1 backing: every hUSDC in existence corresponds to real USDC locked somewhere
• hTokens serve as the intermediate representation during cross-chain transfers

The flow without Bonders:

1. Lock USDC on Ethereum → Mint hUSDC on Ethereum
2. Burn hUSDC on Ethereum → Mint hUSDC on Arbitrum
3. Burn hUSDC on Arbitrum → Release USDC on Arbitrum (from AMM)

Step 2 (Ethereum → Arbitrum) can use the canonical L1→L2 path, which is fast (minutes). The problem is step 3 (Arbitrum → Ethereum), which would use the canonical bridge with its 7-day delay.

---

Bonders: Capital Fronting on Destination

Bonders are capital providers who solve the exit delay problem:

When a user wants to transfer from Arbitrum → Ethereum:

1. User sends hUSDC to Hop’s Arbitrum contract and specifies the destination
2. A Bonder immediately sends actual USDC to the user on Ethereum (fronting the capital)
3. The Bonder waits for the canonical bridge process to complete (7 days for optimistic rollups)
4. After 7 days, the Bonder receives their USDC back (plus the user’s fee)

The Bonder earns the bridge fee for providing this service. Bonders must have significant upfront capital; in return, they receive predictable fee income.

Risk to Bonders: If the Hop contracts are exploited, Bonders could be unable to recover their fronted capital. Bonders bear smart contract risk in exchange for fees.

---

AMMs at Every Rollup

The final piece of Hop’s design: an AMM pool at every supported network that allows swapping between hTokens and native tokens:

hUSDC ←→ USDC  [on each rollup, via AMM]

This AMM pool serves multiple purposes:

1. Natural token→hToken conversion: Users without hUSDC interact with Hop by swapping USDC for hUSDC at the AMM
2. Price discovery: hUSDC may trade at a small discount to USDC when exit demand is high, creating an arbitrage signal
3. Liquidity provision incentives: Liquidity providers earn trading fees from the hToken/token AMM

The AMM design is based on a modified StableSwap (Curve-style) for near-1:1 stablecoin pairs, minimizing slippage for pegged assets.

---

End-to-End Transfer Flow

Example: Alice wants to transfer 1,000 USDC from Arbitrum to Optimism:

1. Alice sends 1,000 USDC to Hop’s Arbitrum contract; it swaps to hUSDC via AMM
2. Hop’s canonical bridge burns the hUSDC on Arbitrum and mints hUSDC on Ethereum L1 (via the rollup’s canonical bridge — this takes 7 days if Arbitrum is optimistic)
3. Bonder fronting: A Bonder immediately mints 1,000 hUSDC on Optimism and provides it to Hop’s contract there
4. Alice receives ~999 USDC on Optimism within minutes (after hUSDC→USDC AMM swap)
5. Seven days later, the Bonder receives their fronted hUSDC (backed by the canonical bridge delivery) plus Alice’s fee

The 7-day wait is absorbed by the Bonder; Alice experiences a near-instant transfer.

---

Reality Check

Hop Protocol works well for its stated purpose. The hToken+Bonder design is elegant and genuinely faster than canonical bridges.

Challenges:

• Capital efficiency: Bonders must hold large capital reserves on each chain to front transfers. This limits throughput and requires Bonders to manage significant multi-chain liquidity.
• zkEVM era: As Ethereum rollups transition to ZK-proofs (Polygon zkEVM, zkSync, etc.), exit times drop to minutes (not 7 days). The urgency of Hop’s Bonder design diminishes for ZK rollups.
• HOP token performance: The HOP governance token (airdropped to early users in 2022) had weak sustained trading volumes.
• Intent-based bridge competition: By 2023, intent-based bridges (Across, UniswapX, deBridge) offered faster and often cheaper cross-chain transfers than AMM-based designs, threatening Hop’s market position.

---

Legacy

Hop’s whitepaper is one of the clearest technical descriptions of the canonical bridge exit problem and a trustless solution. The hToken design inspired several other bridge protocols. Hop proved that fast cross-rollup transfers could be achieved without centralized custodians by carefully structuring the risk between Bonders and AMM LPs.

---

Related Terms

• Rollup
• Optimistic Rollup
• Bridge
• AMM
• Across Protocol Whitepaper

---

Research

• Moody, C. (2021). Hop: A Protocol for Sending Tokens Across Rollups. hop.exchange.

— Primary whitepaper; describes hTokens, Bonder mechanics, AMM pool design, and end-to-end cross-rollup transfer flow with canonical bridge integration.

• Poon, J., & Buterin, V. (2017). Plasma: Scalable Autonomous Smart Contracts. plasma.io.

— Plasma exit games (7-day challenge windows) are the direct motivation for Hop’s Bonder mechanism; understanding Plasma/optimistic rollup exits contextualizes Hop’s problem statement.

• Egorov, M. (2019). StableSwap — Efficient Mechanism for Stablecoin Liquidity. curve.fi.

— Curve’s StableSwap invariant; Hop’s hToken/token AMM pools use a modified version of this design for near-peg stable asset swaps.