Blockchain has the potential to become the new global rails of finance, connecting markets, streamlining cross-border movement of assets, and replacing decades-old infrastructure with a programmable, always-on network that operates at the speed of the internet. Just as SWIFT became the messaging backbone of global banking, distributed ledger technology has the makings of a foundational trust layer through which value and data can move seamlessly and securely across the world.
But a liquidity fragmentation problem is holding it back.
Today, every major blockchain network–private and public–operates as a sovereign ledger with its own governance rules, token standards, and execution environment. Assets and data don’t move freely between them. They stay trapped within isolated networks or ‘walled gardens’.
This isn’t just a technical inconvenience. It’s a foundational flaw that’s preventing the digital economy from flourishing. A stablecoin may be abundant on one network while scarce on another, with no easy mechanism to balance the disparity. Private enterprise networks struggle to connect to public chains without exposing infrastructure or paying for custodial bridges. Network participants have no way to put capital to work, and easily access new sources of liquidity outside of their isolated network or networks.
The ‘workarounds’ deployed to date, including cross-chain bridges, and federated relayer networks, have introduced concentrated points of failure, complex trust assumptions, and billions of dollars in losses to exploits. Specifically, bridges lock assets in contracts, creating pools of value that have proven to have security vulnerabilities. Federated relayer networks introduce permissioned validator sets that diverge from the security of the underlying chains, adding new trust assumptions rather than removing them. None of these approaches are truly decentralized. None eliminate the need to rely on a third-party intermediary.
Introducing CLPR (Cross-Ledger Protocol)
For this reason, Hashgraph developed CLPR (pronounced “Clipper”), a new bridgeless Cross-Ledger Protocol that takes a fundamentally different approach. Rather than pooling locked assets or delegating trust to a set of permissioned validators, CLPR uses cryptographic state proofs to let tokens, data, and arbitrary messages move between ledgers directly, with no custodian, no pooled liquidity, and no single point of failure.
Trust between ledgers, not trust in intermediaries
CLPR’s governing principle is straightforward: no intermediary should ever hold, control, or be able to permanently block the movement of assets. The protocol achieves this not through promises or governance structures, but through math.
Where participating ledgers support it, CLPR establishes trust directly ledger-to-ledger using state proofs and communication between validators. One ledger verifies the other’s state without relying on any third party in between. Trust is established between the two ledgers. There are no honeypots, no operators who can redirect funds, and no single point of failure that attackers can exploit.
Think of it as a post office model. The post office routes your letter from one place to another without reading it, altering it, or holding onto your money. CLPR does the same for value and data. Routing between ledgers according to cryptographically enforced rules, without ever taking custody of what’s being transferred.
And most importantly, CLPR moves value natively between ledgers cryptographically–without intermediaries and bridges. It enables assets from any chain to flow into and out of networks to drive liquidity so islands of ‘trapped assets’ can be a thing of the past.
What networks CLPR supports today
CLPR’s initial deployment is interoperability between HashSphere private enterprise networks and the Hedera public network, covering both Sphere-to-Sphere and Sphere-to-Hedera transfers. Because HashSphere networks are aBFT by design and powered by Hedera technology, inter-Sphere transfers can achieve overall aBFT security for the combined system, and achieve some of the fastest cross-ledger settlement times available anywhere in the blockchain ecosystem.
This capability also directly addresses a core liquidity challenge: enabling capital to flow freely between private HashSphere deployments and the broader Hedera public network, without requiring users to go through centralized exchanges or custodial bridges.
Looking ahead, the protocol is designed to be chain-agnostic. On the public blockchain side, CLPR is being built to first support major networks, including Ethereum and other widely adopted public chains. On the private and enterprise side, CLPR can be deployed on permissioned EVM-based implementations such as Hyperledger Besu or Avalanche subnets, as well as other private ledger environments. Any network that can produce or verify state proofs is a candidate for CLPR support, regardless of whether it is a public chain or a private deployment.
How it works
CLPR is designed to work in two steps.
- In Step 1, each ledger runs CLPR endpoints: dedicated servers that communicate directly with their counterparts on the other ledger. These endpoints exchange proofs to verify and settle cross-ledger transfers of messages and tokens. At no point does any intermediary hold or control assets. If an endpoint goes offline, transfers pause and resume automatically when connectivity is restored. Funds are never at risk.
- In Step 2, once both ledgers have implemented CLPR natively, the validators themselves become the endpoints. No separate infrastructure is required. Each ledger verifies the other’s state using its own native proof mechanism, with no additional layer in between.
“CLPR represents a fundamental shift in how networks interact,” said Dr. Leemon Baird, Co-Founder of Hedera. “Just like internet protocols enabled global communication, CLPR creates a shared foundation for moving tokens and data seamlessly across networks. By eliminating the need for bridges, it offers a more secure and trusted model.”
CLPR is inherently secure by design
Cross-chain bridges have collectively lost billions to exploits, exposing a fundamental flaw in their design. Traditional bridges introduce intermediary trust points (bridge operators, validator sets, or custodians) whose compromise can result in total loss of funds. When you connect networks through a trusted intermediary, you don’t eliminate counterparty risk, you concentrate it.
CLPR replaces those intermediary trust points with cryptography. The protocol is explicitly designed to preserve, not weaken, the security assumptions of each participating ledger. It does not introduce a new trust layer on top of existing consensus. It uses the existing consensus of each ledger as its foundation. Where both ledgers are aBFT, the inter-ledger protocol is also aBFT.
Are there any security risks associated with CLPR?
Not all ledgers will implement CLPR at the protocol level. Networks like Ethereum are more likely to participate via smart contracts, initially with a subset of nodes acting as CLPR endpoints, yet the security model remains the same. A consequential risk is a bug in a verifier contract or a flawed state proof implementation. It’s important that verifier contracts be treated as security-critical code and independently audited before deployment.
Moving a token across ledgers always requires the token issuer’s authorization. To move Token A from Ledger 1 to Ledger 2, either the issuer authorizes CLPR to burn it on the source ledger and mint it on the destination, or it is frozen on the source and a wrapped version is created on the destination. CLPR doesn’t eliminate this requirement. It simply ensures that when authorization is granted, the transfer executes securely, verifiably, and without a trusted intermediary in the middle.
More than token transfers
CLPR is designed as a general-purpose inter-ledger communication layer, not just a mechanism for moving tokens. The same infrastructure supports cross-ledger data messaging (smart contracts on one ledger triggering actions on another) and cross-ledger oracle workflows, enabling consistent, tamper-resistant data feeds across multiple networks. This opens up application architectures that simply aren’t possible with token-only bridges.
The practical implications are significant. Private networks can connect to public networks, expanding distribution while maintaining compliance and control. Assets can be issued on one network and used on another. Settlement can happen quickly across counterparties and systems in a single flow, reducing friction in trading and operations.
Conclusion
The fragmentation of blockchain liquidity is a structural impediment to the maturation of the digital economy and blockchain-based application adoption at scale. Existing solutions have papered over the problem while introducing unintended new risks.
By grounding inter-ledger transfers in cryptographic state proofs rather than pooled liquidity and trusted custodians, CLPR achieves something that has not previously been possible at scale: a genuinely bridgeless, chain-agnostic mechanism for moving value and data between sovereign blockchain networks.
CLPR represents the missing infrastructure layer for an interoperable digital economy, one where capital flows freely between networks, not because someone has promised to keep it safe, but because the cryptographic protocol ensures security and availability.
Join the Early Adopter Program
CLPR is currently in closed beta. Hashgraph is inviting a select group of institutions to join the Early Adopter Program, an opportunity to help shape the protocol before it formally launches to market.