Squid Router Review 2026: Cross-Chain Swaps on Axelar

Squid Router is a cross-chain swap and bridge interface built on Axelar's general message passing. It lets users swap, bridge and route tokens across more than 100 blockchains in a single transaction. The team launched the app in late 2022 and describes Squid as a cross-chain liquidity layer that makes cross-chain activity easy to use.

One third-party source reports that Squid has routed about $6 billion and has over a million users. This is a single-source figure, and Squid's own homepage could not be checked here. Squid 2.0, described on the project's site in September 2024, added programmable multi-hop and multi-bridge routes.

In May 2026 a third-party Gnosis Safe module named SquidRouterModule was exploited for roughly $3 million to $3.2 million. Squid said the contract shared its name but not its code, and that its own router and users were unaffected. The episode shows how easy it is to confuse lookalike contracts with the real one.

Squid is a router. A user picks a token on one chain and the token they want on another. Squid finds a path that may include a swap on the source chain, a bridge transfer, and a swap on the destination chain, and bundles these into one transaction.

The cross-chain messaging runs on Axelar's general message passing, which lets a contract on one chain trigger an action on another. Squid 2.0 extends this with multi-hop and multi-bridge routes that use both on-chain and off-chain liquidity, plus pre-hooks and post-hooks for extra actions.

For a newcomer the effect is that moving value between chains takes one signature and one quote instead of manual steps across several apps. The cost is that the transfer depends on Squid's contracts, the liquidity venues and the messaging layer all working correctly.

Squid does not publish a fixed fee table in the material reviewed. Costs on a cross-chain route usually come from network gas on the source and destination chains, bridge or relayer charges, and slippage on the swaps along the way.

The app should show an estimated total before you sign. Compare that quote with the amount you expect to receive, especially on large transfers or thin pairs.

Squid's router contract is verified on a block explorer as a proxy with a separate implementation contract. The material reviewed does not name audit firms, publish audit reports or describe a bug bounty, so these should be checked on Squid's official documentation.

In May 2026 attackers drained about $3.2 million from 86 Gnosis Safes through a third-party module called SquidRouterModule, on Ethereum and Base. Squid said it had no role in writing or deploying that contract, that its own router was not affected, and that user balances and approvals remain safe. A later technical write-up contrasts the legitimate router, which validates incoming messages through the Axelar gateway, with the exploited module, which accepted a fixed public string as proof. Always verify contract addresses and the website, since the Squid name is also used by unrelated projects and scams.

Cross-chain transfers carry smart-contract, bridge and messaging risk, and funds are not insured. Transactions are generally irreversible.

Squid Router suits DeFi users who move assets between many chains, and developers or wallets that want to embed cross-chain swaps. It is less suited to people who want a custodial service or who are unwilling to check contract addresses and approvals themselves.