Bridges have lost more money than any other category in crypto, and the reason is structural: they lock a large pool of collateral behind a small number of keys or one verification routine, creating a target worth attacking. CCTP does not have one.
How burn-and-mint works
You burn USDC on the source chain. Circle's attestation service observes the burn and signs a message. That signature authorises minting an equal amount of native USDC on the destination chain. No wrapped token is created, no collateral sits in a contract, and the USDC you receive is the same asset the issuer would give you directly.
The trust you are accepting
Circle's attestation service is a centralised component. If it stops signing, transfers stop; if it signed incorrectly, USDC could be minted improperly. That is a genuine dependency and it is a single well-capitalised, regulated entity rather than an anonymous multisig — which for most users is a better counterparty than a bridge validator set.
Costs and coverage
No protocol fee on standard transfers; you pay gas on both chains. Coverage spans the chains Circle chooses to support, which is a growing list including Ethereum and its major L2s, Solana, Base and others. Fast transfer options with a small fee exist on supported routes.
Who should use it
Anyone moving USDC between supported chains. It is the safest bridging route available for that specific asset, and it does nothing for anything else.