Chainlink CCIP

Definition

Chainlink's Cross-Chain Interoperability Protocol for transferring tokens and arbitrary messages between blockchains, secured by decentralized oracle networks and a separate risk management layer.

In depth

CCIP relies on Chainlink's decentralized oracle networks, whose node operators commit to messages leaving a source chain and execute them on the destination chain. A separate Risk Management Network, run by independent nodes on a separate codebase, checks those commitments and can halt the protocol if it detects anomalies, which adds defense in depth. Token pools on each chain handle transfers with lock-and-release, lock-and-mint or burn-and-mint methods depending on the token, and configurable rate limits cap how much value can move in a given period. Developers integrate through router contracts, and token issuers can use Chainlink's cross-chain token standard to make their tokens transferable across supported chains.

What does Chainlink CCIP mean?

An app on the source chain calls the CCIP router with a message, tokens or both, and pays a fee. The token pool on the source chain locks or burns the tokens. Oracle nodes observe the finalized transaction and post a commitment on the destination chain. The Risk Management Network independently checks that commitment and either approves it or raises an alert. Once it is approved, executing nodes deliver the message to the receiving contract, and the destination token pool releases or mints the tokens for the recipient.

An example

A lending app wants users on two blockchains to share one set of loan records. When a user repays 1,000 USDC on the first chain, the app sends a CCIP message, paying about $0.50 in fees, that tells its contract on the second chain to update the loan. Around twenty minutes later, after the source chain finalizes and the message is verified, the second chain's contract records the repayment.

Figures are illustrative only.

What beginners get wrong

• Many people think CCIP is Chainlink's price oracle under another name. It uses Chainlink's oracle node infrastructure, and it is a separate protocol for moving messages and tokens between chains.
• It is easy to assume a transfer through CCIP carries no risk. It relies on its node operators and its contracts, and rate limits exist because failures remain possible.
• Some users believe any token can move through CCIP. A token must be configured with a token pool on both chains before it can be transferred.