CLPR in three levels
Level

CLPR

/ˈklɪpər/ · “clipper”

A protocol that lets two blockchains send messages to each other directly, with no bridge in the middle. Each network checks for itself that what it receives is authentic.

Two blockchains talk directly, each verifying the other’s state with cryptographic proofs. No bridges, no locked liquidity, no intermediary validators.

A mail service between blockchains. Hedera sends messages, payments or data to another network, and each side checks for itself that they are authentic. No middlemen you have to trust blindly.

Hashgraph → LFDT, 24 Sep 2026 Apache 2.0

How it works, in five steps

Hedera its ledger earlier messageearlier message … Another blockchain its ledger destination app ?
1/5

With a bridge vs. with CLPR

Chain A Chain B intermediary+ locked funds
With a bridge. An intermediary holds the money and vouches for what happens. You have to trust it, and that pot of funds is a weak point.
Chain A Chain B message + proof
With CLPR. Each network checks the other directly. You only trust the two networks, and there is no pot of funds left in the middle.
What it isA protocol that lets two blockchains send messages to each other directly: payments, data or instructions for an app on the other network.
The key ideaEvery message travels with a cryptographic proof that it is recorded on the sending network’s ledger. The receiving network checks that proof itself.
Who carries itAnyone can carry the messages. Since they can’t forge the proof, the worst they can do is delay them.
Who paysA sponsor, chosen by the app, keeps funds on both networks and covers the cost of delivering each message. If it fails to pay, it loses part of its deposit.
Who’s behind itIt was created by Hashgraph, the team behind Hedera, and since September 2026 it has been open source at the Linux Foundation.

From Hedera to an EVM network and back

How a letter travels from Hedera to another network

Step through it. Switch to “Unfunded Connector” to see what happens when someone doesn’t pay.

Press Next. Also try “Nobody pays” to see what happens if payment fails.

LEDGER A · HEDERA (HIERO) LEDGER B · EVM NETWORK (BESU) OFF-CHAIN TRANSPORT App Ayour contract on Hedera CLPR Servicechannel outbound queue Connector Aauthorizes and backs Verifier Contractverifies B’s proofs Endpointof A Endpointof B gRPC · bundle + state proof App Bdestination contract CLPR Serviceprocesses incoming bundles Verifier Contractverifies A’s proofs Connector Bpays for execution
00

or use ← →

The running hash chains the queue

The chained seals

Each message is chained: SHA-256(previous hash ‖ payload). The state proof only certifies the last hash. Edit a message “in transit” and see what the destination ledger does.

Each letter carries a seal that depends on the previous letter. The official seal only certifies the last one. Change a letter on the right, as if someone tampered with it along the way, and see what happens.

Queue on Ledger A · proven by state proofLetters on Hedera · with official seal

anchor hash:last seal: …

What the endpoint delivers · editableWhat the mail carrier brings · editable

recomputed on B:recomputed seal: …
ACCEPTEDThe hashes match. The bundle is processed.

Where the trust model changes

What does it improve over a bridge?

Typical bridgeCLPR
Who do you trust?The intermediary running the bridgeOnly the two blockchains
What happens to your money?It gets locked and you receive a copyMessages travel; each app decides what to do
If someone cheatsThey can steal if they control the bridgeAt most they cause delays; forging is impossible
Is there a new token?Often, yesYou pay in each network’s own currency
Honest parties neededMost of those watching over the bridgeJust one honest mail carrier per city
Who you trustThe bridge’s validators or multisigOnly the two ledgers and their verifier
AssetsLocked tokens + wrappedMessages; asset logic is up to the app
Malicious nodeCan steal funds if it controls the quorumCan delay, never forge
Own tokenOften, yesNone; fees paid in the native token
Honest parties neededMajority of the validator setOne honest endpoint per ledger

The pieces, explained as a postal service

Component glossary

Think of each blockchain as a city. CLPR is the postal service that connects them. Under each piece you’ll find its technical name.

See all 11 piecesSee all 11 components

Four layers, each with its own job

The postal service, layer by layer

From registration to orderly closure

The life of a postal route

FAQ

What people usually ask

Only what is stated in the specification, the LFDT lab proposal or the official announcement. Each answer cites its source.Everything comes from the official documents. Under each answer you’ll see where it comes from.

The LFDT-CLPR repositories

For anyone who wants to see the code