Tesseract is the open-source cross-rollup atomic swap protocol. Trustless multi-leg swaps across Ethereum, Polygon, Arbitrum, Optimism, and Base — MEV-protected, flash-loan resistant, settled in under thirty seconds.
Architecture
Tesseract is built deliberately small. Every feature below is enforced in code on the rollup itself — not gated by a multisig, a validator quorum, or an optimistic dispute window.
Every swap is buffered as a hash commitment first and revealed only after the next block. Searchers, sequencers, and sandwich bots see nothing useful in the mempool — your trade lands at the price you signed for, not the price someone reorganised the block for.
A multi-leg trade across three rollups either executes everywhere or refunds everywhere. The TesseractBuffer contract enforces group atomicity at the protocol layer, so partial fills, stranded collateral, and half-finished cross-chain routes simply cannot happen.
A mandatory 2-block resolution delay (configurable up to your chain finality) makes single-block flash loan exploits structurally impossible. Combined with role-gated resolution and a circuit breaker after 50 consecutive failures, the buffer hardens the surface attackers usually target.
A high-throughput Rust relayer monitors 4+ chains in parallel over WebSocket with HTTP failover, tracks per-chain confirmation rules, and recovers stuck nonces automatically. Auto-scales 2–10 instances on CPU and persists state in PostgreSQL — not in someone's memory.
Tesseract coordinates native swaps directly on each rollup. Users hold real assets, not bridge receipts. There is no honeypot multisig, no canonical-vs-wrapped fragmentation, and no $600M failure mode waiting to be exploited.
AtomicSwapCoordinator gives makers and takers a real on-chain order book with configurable slippage tolerance and partial fill support. Settle 500 USDC of a 1000 USDC order without forcing the entire trade through.
The TESS token powers protocol governance, fee discounts up to 50%, and staking rewards from 5% to 15% APY based on lock duration. Fees flow through an on-chain FeeCollector — transparent, auditable, no opaque off-chain treasury.
Honest comparisons
We don't pretend our competitors are bad. We do explain the architectural choices and what they cost you.
LayerZero is a general-purpose omnichain messaging protocol that lets contracts on chain A trigger contracts on chain B via an off-chain Oracle + Relayer pair. It's a brilliant primitive for arbitrary cross-chain calls — but the security model bottoms out at trusting that the Oracle and Relayer don't collude.
Wormhole is a generic message-passing protocol secured by 19 Guardian nodes that sign attestations of source-chain events. It moves data and assets across ~30 chains, but its security and atomicity ultimately rest on the Guardian set being honest and available.
Across is an intent-based bridge that uses competitive relayers to fill user requests on the destination chain, then settles those fills back to relayers using UMA optimistic oracle on a slower cadence. Fast UX, but the security model is optimistic, not atomic.
Chainflip is a Substrate-based appchain that runs its own validator set, vaults user funds, and executes cross-chain swaps through threshold signature schemes. It supports non-EVM chains (Bitcoin, Solana) — but that comes with a separate consensus layer and an external trust boundary.
THORChain is a Cosmos-based cross-chain liquidity protocol that uses continuous liquidity pools and a TSS-secured validator set to swap native assets across Bitcoin, Ethereum, and several major chains. Production-proven, but it's a separate L1 with its own economics.
From the blog
Step-by-step technical guide to adding Tesseract atomic swaps to a DeFi yield vault that rebalances across Ethereum L2s — with code, gotchas, and operational checklist.
An honest, technical comparison of Wormhole's Guardian network and Tesseract's contract-enforced atomicity — including what happened in February 2022 and why it matters.
Where the bridge wars of 2022 actually landed, why intent-based protocols took over the conversation, and what the next 18 months look like for atomic settlement across L2s.
FAQ
Clone the repo, run the 135-test suite, deploy to testnet in fifteen minutes. The protocol is open source, the contracts are audit-ready, and the documentation is honest about what's done and what isn't.