1. Too many routes
As the previous chapter showed, Ti’s supported range alone has 28 (chain, token) combinations and 756 swap directions. Even a single direction has several routes. For a swap within one chain, pools holding the same token pair exist separately for each fee tier and for each DEX. If the pool that trades the pair directly is shallow, a multi-hop route through one intermediate token may do better. For a swap across chains, you must decide whether to first convert, on the source chain, to a token the bridge can carry, which bridge to use, and whether to convert again on the destination chain, and at every step you must choose a pool and a fee tier again. Here is how many routes there are in practice. On November 2, 2026, a request to the Ti quote API for a quote to swap 1,000 USDC on Ethereum to USDT returned 26 routes: 10 single-pool candidates and 16 multi-hop candidates. Uniswap V3’s four fee tiers, several Uniswap V4 pools and allowlisted Curve stable pools were all candidates. That holds even for the simplest swap, one that never leaves the chain.2. Costs are hidden in the amount received
A single swap carries five costs: the pool fee charged by the liquidity pool; price impact, which arises as your order pushes the pool’s price; the bridge fee charged by a bridge when crossing chains; the network fee (gas) paid to the blockchain; and the time cost of the market moving between the quote and execution. Apart from the network fee, most of these never arrive as a separate bill. The amount received is simply smaller by that much. So comparing an “exchange rate” or a “fee rate” alone cannot tell you which route is better. You have to compare the amount that actually lands in your hands when the swap executes. Comparing quotes from the same API on the same day, changing only the amount, makes this clear.
When swapping 1,000, the Uniswap V4 pool paid the most, but when swapping 1 million, the Curve pool came first. The Uniswap V3 0.05% pool, which was barely different at 1,000, sees its price impact grow to 66.9% at 1 million and returns just over 330,000. The best route is not fixed. It changes with the amount and with the state of the pools at that moment. Making this comparison every time by switching between several apps is hard for a person.
Ethereum · USDC → USDT · 10 single-pool and 16 multi-hop candidates
How much less each route delivers than the best route for the same amount
Shortfall · log scale
Best0.1bp1bp10bp1%10%100%
Uniswap V4 pool
1,000 USDC1,000,000 USDC
Curve stable pool
Uniswap V3 0.01% pool
Uniswap V3 0.05% pool
Price impact 66.9%
Uniswap V3 0.30% pool
Uniswap V3 1.00% poolFills only in part: not enough liquidity
Best multi-hop candidateTwo Uniswap V3 pools · via WETH
Source · Ti quote API, 2026-11-02, about 11:25 UTC. Shortfall = 1 − amount received ÷ amount received on the best route for the same amount. Curve: the pool that paid more at each size (1,000: 0x4f49…3C85; 1,000,000: 0xbEbc…F1C7). Uniswap V4: the pool with fee setting 8 (0.0008%).
Figure 6. At 1,000 USDC the Uniswap V4 pool pays the most and at 1,000,000 USDC the Curve pool does, while the Uniswap V3 0.05% pool, barely behind at 1,000, delivers 66.9% less than the best route at 1,000,000.
Crossing chains makes the comparison more complex. On the same day, a quote to move 1,000 USDT on Arbitrum One to USDT on Polygon produced two routes. One moves the tokens directly as USDT0, which uses the LayerZero OFT standard: it delivers 1,000.00 USDT and charges a separate messaging fee of about 0.0000113 ETH (about $0.03). The other swaps USDT to USDC on Arbitrum One, moves it with Circle CCTP and swaps it back to USDT on Polygon; the bridge fee is reflected in the amount received, which comes to 999.82 USDT. One route charges its cost separately in the native token, and the other deducts it from the amount received. A fair comparison has to convert both to the same basis.3. Every bridge asks you to trust something different
Crossing chains means getting one chain to trust what happened on another. How a bridge builds that trust determines its risk. The oldest approach locks the original token on the source chain and mints a wrapped token that stands in for it on the destination chain. In that case, the wrapped token’s value depends on the safety of the lockbox and of the validators that guard it. Some bridges are run directly by the issuer. Circle’s CCTP burns USDC on the source chain and, once Circle attests to the burn, mints new native USDC on the destination chain.18 No wrapped token is created, and the party you have to trust is the issuer of USDC itself. Tether’s USDT0 uses LayerZero’s OFT standard. It locks the original USDT on Ethereum in an adapter contract and mints the same amount of USDT0 on other chains, and between USDT0 chains it burns on one side and mints on the other. A message passes only when all three verifiers (DVNs) confirm it.19 When the verification structure is weak, the price is high. According to DefiLlama’s hack records, there were 102 bridge hacks through November 1, 2026, with losses of $3.69 billion, or 13.4% of the $27.56 billion lost to all hacks.20 The best-known cases are Ronin ($624 million), where attackers stole the keys of five of its nine validators, the number needed to sign; Wormhole ($326 million); and Nomad ($190 million). In April 2026, Kelp’s rsETH, which had set up only one verifier for its LayerZero messages, lost about $292 million to a forged message.21 Even on the same messaging standard, how the verifiers are configured decides safety. Users usually cannot see this difference, and have no way to find it out.Bridge hacks · DefiLlama records · through Nov 1, 2026
The eight largest bridge exploits
Bridge exploitSingle-verifier setup
| Rank | Name | Date | Type | Loss |
|---|---|---|---|---|
| 1 | Ronin | 2022-03-23 | Validator Key Compromised | $624.0M |
| 2 | Poly Network | 2021-08-10 | Improper Access Control | $611.0M |
| 3 | Binance Bridge | 2022-10-06 | Proof Verifier Bug | $570.0M |
| 4 | Wormhole (Portal) | 2022-02-02 | Signature Verification Flaw | $326.0M |
| 5 | Liquid Network | 2026-09-06 | Unbacked Cross-Chain Mint | $320.0M |
| 6 | Kelp rsETH | 2026-04-18 | Cross-Chain Message Spoofing | $293.0M |
| 7 | Nomad | 2022-08-01 | Forged Proof | $190.0M |
| 8 | Multichain | 2023-07-07 | Validator Key Compromised | $126.0M |
Source: DefiLlama Hacks — entries flagged as bridge hacks (bridgeHack), through Nov 1, 2026. Attack types as classified by DefiLlama
Figure 7. Bridge exploits have cost $3.69 billion, 13.4% of all hack losses, and most of the largest broke the verification layer: validator keys, proofs or messages.
4. An AI answer is not a quote
Ask an AI assistant “How do I move USDC to Arbitrum?” and you get a plausible explanation. But that explanation is not a quote, and a quote is not a signed transaction. The three are clearly different.- A chat answer is text. It is generated from knowledge as of training time or from the context of the conversation, and a language model can state untrue things with confidence. The U.S. National Institute of Standards and Technology (NIST) classifies this as “confabulation,” a key risk of generative AI.32
- A quote is an executable number at a specific point in time. It must specify which pools and bridges it goes through, how much you receive and how long it is valid.
- A signed transaction moves money. Once executed, it cannot be reversed.