What are cross-chain bridges? Why they keep getting hacked

Blockchains can’t discuss to one another on their very own. Bridges are the software program that strikes worth between them, they usually have leaked more cash to hackers than every other sort of crypto infrastructure, billions throughout a handful of catastrophic breaches. Right here is how bridges truly work, the totally different belief fashions behind them, and why the connective tissue of crypto can be its most harmful single level of failure.

There are lots of of blockchains, and by design none of them can see the others. Ethereum has no native technique to know what occurred on Solana; a Bitcoin holder can’t immediately spend that Bitcoin inside an Ethereum utility. Every chain is an island with its personal ledger, its personal validators, and no built-in bridge to the mainland.

But customers always want to maneuver worth between these islands, to chase yield, entry an utility, or attain cheaper charges, and that want created a whole class of infrastructure: the cross-chain bridge.

A bridge is software program that lets belongings and knowledge transfer between blockchains that in any other case can’t talk. It’s important plumbing; with out bridges, liquidity could be trapped on whichever chain it began on, and the multi-chain world that defines crypto as we speak couldn’t operate. Bridges now transfer billions of {dollars} every week, and their complete worth locked runs into the tens of billions.

They’re additionally the only most harmful piece of infrastructure in crypto. Bridge exploits have produced among the largest thefts the business has ever recorded, with particular person breaches operating into the lots of of hundreds of thousands and the class’s cumulative losses within the billions. The identical design that makes a bridge helpful, holding or controlling giant swimming pools of belongings throughout chains, makes it a concentrated goal, and a small flaw in a bridge can drain a fortune in minutes.

This information explains how bridges work, the principle architectures they use, the belief fashions that decide how secure every one is, why they maintain getting hacked, and the way to consider bridge threat earlier than transferring your personal funds.

Why bridges are obligatory

The basis downside is isolation. A blockchain is a self-contained ledger whose validators agree solely on the state of their very own chain. Nothing in Ethereum’s protocol can natively confirm {that a} transaction occurred on one other chain, as a result of doing so would require Ethereum’s validators to additionally run and belief each different chain, which they don’t. Every community is sovereign and blind to the others.

Earlier than bridges, the one technique to transfer worth between chains was by way of a centralized trade: ship your asset to the trade on one chain, commerce it, and withdraw a unique asset on one other chain. This works however reintroduces precisely the centralized middleman that crypto was meant to scale back, together with accounts, custody, and withdrawal limits. Bridges emerged to do the identical job extra immediately, letting worth transfer between chains with out handing it to an trade within the center.

The demand is big as a result of the ecosystem is fragmented by design. Totally different chains optimize for various issues, and customers wish to mix them: maintain an asset native to at least one chain however use it in an utility on one other, transfer to a community with cheaper charges, or provide liquidity the place the returns are highest. The connective function bridges play is why the business generally calls them the tissue linking the chains, and it’s why bridge quantity tracks the general development of multi-chain exercise. As newer designs push extra of that exercise towards stablecoin settlement and funds, the demand to maneuver dollar-denominated worth throughout chains has solely intensified, echoing the broader rise of payment-focused chains constructed round transferring steady worth effectively.

The catch is that connecting sovereign, mutually blind methods is genuinely laborious, and each methodology of doing it introduces a belief assumption someplace. That assumption is the place the cash leaks.

How a bridge strikes an asset

Most bridges depend on a simple-sounding trick: they don’t truly ship an asset from one chain to a different, as a result of that’s unimaginable. As an alternative, they lock or destroy the asset on the supply chain and create a corresponding asset on the vacation spot chain.

Three important architectures implement this concept.

The lock-and-mint mannequin is the commonest. If you bridge an asset, the bridge locks your unique tokens in a wise contract on the supply chain, like placing them in a vault, and mints an equal wrapped token on the vacation spot chain. That wrapped token is a declare on the locked unique, redeemable by reversing the method: burn the wrapped token on the vacation spot chain, and the bridge unlocks the unique on the supply chain. The locked belongings sit within the bridge’s custody the whole time, which is exactly why lock-and-mint bridges have been essentially the most exploited: the vault holding everybody’s locked belongings is a single, monumental goal.

The burn-and-mint mannequin is used primarily for belongings whose issuer controls provide throughout chains, similar to sure stablecoins. As an alternative of locking the asset, the bridge completely burns it on the supply chain, eradicating it from that chain’s provide, and mints a recent, native model on the vacation spot chain. As a result of the vacation spot asset is actually native, not a wrapped declare, this avoids the pool-of-locked-assets downside, however it solely works when a single issuer has authority to burn and mint the asset on each chain, which is why it’s common for stablecoins and uncommon for every little thing else.

The liquidity-pool mannequin takes a unique strategy. The bridge maintains swimming pools of belongings on each supported chain, and once you bridge, you deposit into the pool on the supply chain and withdraw the equal from the pool on the vacation spot chain, typically with a solver or market maker fronting the vacation spot asset immediately and settling later. Nothing is wrapped; you merely swap into stock that already exists on the opposite facet. This may be sooner and avoids wrapped-token threat, however it requires the bridge to maintain giant inventories on each chain, which is each capital-intensive and, once more, a goal.

Past transferring belongings, trendy bridges additionally go messages: arbitrary information and directions that permit a wise contract on one chain set off an motion on one other. A token switch is simply the only message, saying an quantity was locked right here, so mint it there. Extra elaborate messages let an utility on one chain react to occasions on one other, which powers cross-chain lending, governance, and sophisticated functions. This basic message passing is highly effective and expands what bridges can do far past easy transfers, however each added functionality is added floor space for one thing to go improper.

The belief fashions that determine security

The essential query for any bridge is who verifies that the source-chain occasion truly occurred earlier than the vacation spot chain acts on it. The reply is the bridge’s belief mannequin, and it’s the single greatest determinant of how secure the bridge is. There’s a well-known framework classifying these fashions, and it maps cleanly onto a spectrum from convenient-but-risky to trustless-but-costly.

The trusted mannequin depends on a hard and fast set of exterior validators, typically secured by a multisignature or multiparty scheme, who watch the supply chain and log out on occasions for the vacation spot chain. That is quick, low cost, and easy, however the validator set is the belief assumption: if sufficient of their signing keys are compromised, the attacker controls the bridge. Lots of the largest bridge hacks in historical past have been failures of precisely this mannequin, the place an attacker gained management of sufficient validator keys to authorize fraudulent withdrawals. When a bridge’s safety rests on a handful of keys, these keys are the entire recreation.

The sunshine-client or validity-proof mannequin is the trustless finish of the spectrum. Right here the vacation spot chain truly runs a lightweight consumer of the supply chain and cryptographically verifies its block headers, or accepts a validity proof, as a substitute of trusting a set of signers. That is far safer as a result of it removes the human validator set and replaces it with arithmetic, however it’s costly in computation and sophisticated to construct, and it doesn’t work effectively for each pair of chains. Advances in zero-knowledge proofs, the identical cryptography transferring to the middle of Ethereum’s long-term rebuild, are extending this mannequin to extra chains, however it stays more durable to deploy than trusting a signer set.

Between the extremes sit optimistic and hybrid fashions, which assume transactions are legitimate however permit a problem window throughout which watchers can submit proof of fraud, much like how some scaling methods safe their withdrawals. These commerce some pace, by way of the problem delay, for stronger safety than a pure trusted mannequin, with out the complete value of a lightweight consumer. The place a bridge sits on this spectrum tells you virtually every little thing about its threat: the extra it depends on a small trusted group and the much less it depends on cryptographic verification, the extra it is dependent upon these few events by no means being compromised.

Why bridges maintain getting hacked

Bridges have misplaced extra to hackers than every other class of crypto infrastructure, and the explanations are structural, not unintentional. Understanding them explains why the issue persists regardless of years of painful classes.

The primary purpose is focus of worth. A bridge, particularly a lock-and-mint one, accumulates a big pool of locked belongings backing all of the wrapped tokens it has issued. That pool is a single honeypot, and in contrast to a diffuse set of consumer wallets, draining it as soon as takes every little thing. Attackers are economically rational, they usually gravitate to wherever essentially the most worth sits behind the fewest defenses, which describes a big bridge virtually completely.

The second purpose is weak belief fashions. Many bridges selected the quick, low cost, trusted mannequin, securing lots of of hundreds of thousands of {dollars} behind a small set of signing keys. The most important bridge thefts on report have been, at their core, key compromises: an attacker obtained management of sufficient of the bridge’s validator keys, by way of phishing, malware, or infrastructure breaches, after which merely licensed withdrawals that the bridge handled as respectable. No intelligent exploit of the blockchain was wanted, solely management of the keys the bridge trusted. A bridge secured by 9 keys the place 5 are sufficient to maneuver funds is, in safety phrases, a five-key vault.

The third purpose is complexity. Bridges are among the many most advanced smart-contract methods in crypto, spanning a number of chains, customized message codecs, and complex verification logic, and complexity is the enemy of safety. Each added characteristic, each new supported chain, each message kind is extra code that may comprise a refined flaw, and bridge exploits have repeatedly come from bugs in verification logic that permit an attacker forge a proof of a deposit that by no means occurred, inflicting the bridge to launch funds towards nothing. The fraud-proof and verification methods which are supposed to protect a bridge are themselves advanced code, and a flaw there may be catastrophic as a result of it undermines the whole safety mannequin directly. The class’s historical past rhymes with the broader lesson that concentrated infrastructure fails laborious, the identical dynamic seen when any single level of management turns into the weakest hyperlink in an in any other case sound system.

These three forces mix right into a grim equation: bridges maintain monumental worth, typically behind belief fashions thinner than the worth warrants, inside code advanced sufficient to cover deadly bugs. That’s the reason, even because the business has realized laborious classes and newer designs have improved, bridges stay the place the place the most important single thefts are inclined to occur.

The anatomy of a bridge hack

To make the danger concrete, it helps to stroll by way of how a typical bridge exploit truly unfolds, as a result of the sample repeats throughout practically each main incident and divulges why the losses are so complete.

Most catastrophic bridge hacks fall into certainly one of two shapes. The primary is a key compromise. A trusted-model bridge secures its locked belongings behind a set of signing keys, and an attacker obtains management of sufficient of these keys, by way of phishing an worker, compromising a server, or exploiting weak key administration, to succeed in the signing threshold. As soon as the attacker can produce legitimate signatures, the bridge has no technique to distinguish their fraudulent withdrawal from a respectable one, as a result of a validly signed instruction is precisely what the bridge is constructed to obey. The attacker indicators a withdrawal that drains the locked pool, and the belongings are gone earlier than anybody notices, as a result of from the bridge’s perspective nothing broke; the right keys licensed the switch. A number of of the most important bridge thefts in historical past have been exactly this: not a intelligent exploit of the blockchain, however a theft of the keys the bridge trusted, turning the bridge’s personal safety mannequin into the attacker’s device.

The second form is a verification bug. A bridge should confirm {that a} deposit actually occurred on the supply chain earlier than releasing funds on the vacation spot chain, and this verification logic is advanced code. If it incorporates a flaw, an attacker can craft a pretend proof of a deposit that by no means occurred, submit it to the bridge, and the bridge, believing the pretend, releases actual belongings towards nothing. The attacker deposited nothing and withdrew a fortune, as a result of the code that was speculated to test the deposit accepted a forgery. These bugs are catastrophic exactly as a result of they assault the bridge’s core belief mechanism: as soon as an attacker can forge the proof the bridge depends on, they’ll mint or withdraw arbitrary worth till somebody halts the bridge, which in a fast-moving exploit will be far too late.

Each shapes share a defining characteristic that explains why restoration is so uncommon: the theft appears respectable to the bridge in the intervening time it occurs. A key-compromise withdrawal carries legitimate signatures; a verification-bug withdrawal carries an accepted proof. Neither journeys an alarm contained in the system, as a result of each exploit the system doing precisely what it was designed to do, solely on fraudulent inputs. By the point the discrepancy surfaces, often when the locked belongings now not again the wrapped tokens in circulation, the funds have moved by way of mixers and throughout different chains. The wrapped tokens left behind develop into claims on an empty vault, and their holders, who did nothing improper, soak up the loss. That is the mechanism by which a single flaw in a single bridge interprets into lots of of hundreds of thousands gone, and why the safety of a bridge deserves extra scrutiny than virtually every other determination in a multi-chain transaction.

How to consider bridge threat

Bridges are obligatory and, used fastidiously, cheap to depend on, however their threat profile deserves respect. Just a few ideas assist you to consider any bridge earlier than trusting it with funds.

Want stronger belief fashions. A bridge secured by cryptographic verification, a lightweight consumer or validity proofs, or by a canonical connection to a base chain, is structurally safer than one secured by a small exterior signer set. The place a bridge paperwork its belief mannequin, learn it; the distinction between trusting arithmetic and trusting a handful of keys is the distinction between the most secure and riskiest bridges in existence. Impartial frameworks that rating bridges on their belief assumptions exist exactly as a result of this distinction is tough for customers to evaluate alone.

Favor observe report and audits. A bridge with an extended operational historical past freed from exploits, a number of unbiased safety audits, an lively bug bounty, and clear, time-locked improve processes has earned extra belief than a brand new, unaudited one, nonetheless engaging its yields. Bridges should not the place to chase the most recent, highest-return choice, as a result of the draw back of a bridge failure is complete lack of the funds in transit.

Decrease time and measurement in danger. Bridging is riskiest whereas your worth sits within the bridge’s custody or in transit. Transferring smaller quantities, avoiding leaving giant balances in wrapped tokens longer than obligatory, and utilizing aggregators that route by way of the most secure out there path all scale back publicity, whereas minding the slippage a big cross-chain swap can incur alongside the way in which. For very giant transfers, splitting them or accepting the slower security of a canonical bridge will be well worth the inconvenience.

Perceive what you might be holding after you bridge. A wrapped token is a declare on belongings locked in a bridge, and it is just as sound as that bridge. If the bridge is exploited and its locked belongings drained, the wrapped tokens it issued can develop into nugatory claims on an empty vault, although your unique belongings are gone. Native belongings obtained by way of burn-and-mint or liquidity-pool fashions keep away from this particular threat, which is one purpose these fashions are sometimes most popular the place out there, notably for the stablecoins that dominate cross-chain settlement.

The trustworthy abstract is that bridges are indispensable and imperfect. They clear up an actual and unavoidable downside, connecting sovereign chains that can’t see one another, and there’s no means to try this with out introducing a belief assumption someplace. The most secure bridges push that assumption towards cryptography and away from small teams of keys; essentially the most harmful do the reverse and guard monumental worth with skinny belief. Realizing which sort you might be utilizing, and treating the crossing because the riskiest second in any multi-chain transaction, is what separates knowledgeable use from the sort of blind belief that has, many times, funded the most important heists within the business.

It’s value ending on the place the know-how is heading, as a result of the image is just not static. The business has absorbed the teachings of its worst bridge failures, and newer designs more and more favor stronger belief fashions: burn-and-mint transfers for belongings whose issuers can help them, cryptographic mild purchasers and validity proofs the place the chain pairs permit, and intent-based methods the place unbiased events entrance liquidity and tackle the danger fairly than pooling everybody’s belongings in a single honeypot. Impartial threat frameworks now rating bridges on precisely the belief assumptions that was invisible to peculiar customers, making it simpler to inform a well-secured bridge from a harmful one earlier than committing funds. None of this eliminates the basic rigidity that connecting blind, sovereign methods requires trusting one thing, however it does shift the belief towards arithmetic and away from the small key-holding teams that account for the most important historic losses. The bridges of the following few years shall be safer than those who leaked billions, not as a result of the issue received simpler, however as a result of the business paid for the lesson in full and is lastly constructing as if it remembers.

Continuously requested questions

Disclaimer: This text is for informational functions solely and doesn’t represent funding recommendation. Digital asset markets are unstable and you may lose your total funding. All the time do your personal analysis. Data present as of July 7, 2026.