--- title: "Cross-Chain Bridges: How They Work and Why They Get Hacked" description: "An in-depth guide to the architecture of blockchain bridges, the mechanics of lock-and-mint systems, and the structural vulnerabilities that make them prime targets for multi-million dollar exploits." url: https://basisdesk.news/learn/bridges-explained published: 2026-10-02T20:31:03.413Z modified: 2026-10-02T20:31:03.413Z section: DeFi author: Basis Desk Newsroom (AI-generated, source-verified) sentiment: neutral tickers: [ETH] tags: [bridges, interoperability, security, smart-contracts, wrapped-tokens, exploits, multisig] license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice. --- # Cross-Chain Bridges: How They Work and Why They Get Hacked An in-depth guide to the architecture of blockchain bridges, the mechanics of lock-and-mint systems, and the structural vulnerabilities that make them prime targets for multi-million dollar exploits. ## Key points - Cross-chain bridges do not move assets but lock them on a source chain to mint wrapped representative tokens on a destination chain. - The lock-and-mint model relies on a 1:1 backing; if the source vault is drained, the wrapped tokens on the destination chain lose all value. - Bridge verification methods range from centralized multisig validators to decentralized on-chain light clients. - The 2022 Ronin bridge exploit of over $600 million succeeded by compromising five out of nine validator private keys. Cross-chain bridges are software protocols that enable the transfer of data and digital assets between independent blockchain networks. Because blockchains operate as isolated ledgers with distinct consensus rules, they cannot natively communicate or transfer assets directly. Bridges solve this interoperability problem by acting as intermediaries, allowing assets from one network to be represented and used on another. To understand why these systems are both vital and highly vulnerable, one must examine their underlying architecture. While bridges facilitate billions of dollars in transaction volume, they represent some of the most significant points of failure in the decentralized finance ecosystem. ## The Core Mechanics of Lock-and-Mint The most common architecture for moving assets across blockchains is the **lock-and-mint** model. This system does not actually move tokens from one chain to another. Instead, it uses a two-step process managed by smart contracts on both the source and destination networks. First, a user sends their native assets to a specific smart contract on the source chain, where the assets are locked in a vault. Second, once the bridge protocol verifies that the assets are secured in the source vault, it triggers a smart contract on the destination chain to mint an equivalent amount of **wrapped tokens**. These wrapped tokens act as a claim check, representing the locked collateral on a 1:1 basis. For example, if a user wants to bridge 10 units of native $ETH from the Ethereum network to a destination chain like Polygon, the process works as follows: 1. The user deposits 10 ETH into the Ethereum bridge contract. 2. The bridge monitors this deposit and verifies its inclusion in an Ethereum block. 3. The bridge instructs the Polygon contract to mint 10 wrapped ETH (WETH) to the user's Polygon address. 4. To return to Ethereum, the user sends the 10 WETH back to the Polygon bridge contract, which burns (permanently destroys) the wrapped tokens. This action signals the Ethereum contract to unlock and release the original 10 ETH back to the user. If this 1:1 backing is broken—either because the locked assets are stolen or the minting contract is manipulated—the wrapped tokens on the destination chain lose their value, as there is no longer any collateral to redeem. ## Three Models of Bridge Verification To authorize the minting or releasing of assets, a bridge must verify that transactions actually occurred on the opposing chain. Bridges generally fall into three categories based on how they handle this verification. ### External Validators and Multisigs Many bridges rely on a dedicated set of external validators or a multi-signature (**multisig**) wallet to monitor the source chain. When a deposit is made, these validators sign a transaction confirming the deposit. Once a predefined threshold of signatures is reached, the destination chain mints the wrapped assets. While fast and cheap to operate, this model relies heavily on trust. If a majority of the validators are compromised, the security of the entire bridge fails. ### Light Clients and Relayers This model uses smart contracts on the destination chain to run a **light client** of the source chain. A relayer transmits block headers from the source chain to the destination chain's light client contract, which cryptographically verifies that a transaction was included in a block. This approach is highly secure and decentralized because it does not rely on trusted intermediaries. However, running light clients on-chain is computationally expensive and difficult to scale across many different blockchain architectures. ### Liquidity Networks Instead of locking and minting, liquidity networks use local pools of native assets on both the source and destination chains. Users trade their assets on the source chain into a local pool, and routers release the equivalent native asset from a pool on the destination chain. This model avoids the creation of wrapped tokens entirely, reducing systemic risk, but it is limited by the available liquidity in the destination pools. ## Why Bridges Are Prime Targets for Exploits Bridges are uniquely attractive to hackers because they combine high-value targets with complex, multi-layered attack surfaces. Unlike a standard decentralized application that operates on a single ledger, a bridge must interact with different virtual machines, consensus mechanisms, and programming languages simultaneously. There are two primary vectors for bridge exploits: smart contract bugs and cryptographic key compromises. ### Smart Contract Vulnerabilities Because bridges rely on complex smart contracts to manage vaults and minting rights, any coding error can be catastrophic. For instance, if a developer fails to properly validate input data, an attacker can craft a fraudulent transaction that appears valid to the destination contract. This allows the attacker to mint wrapped tokens without ever depositing collateral on the source chain. To understand how these contracts function fundamentally, readers can explore [What Are Smart Contracts? The Architecture of On-Chain Code](https://basisdesk.news/learn/what-are-smart-contracts) [1]. ### Validator Key Compromises In bridges governed by external validators, security depends on the confidentiality of private keys. If a bridge requires five out of nine validators to approve a transaction, an attacker only needs to steal five private keys. Once they control this threshold, they can instruct the bridge to unlock all the assets in the source vault without burning any wrapped tokens on the destination chain. The 2022 exploit of the Ronin network, which resulted in the loss of over $600 million, occurred because attackers compromised the private keys of five validator nodes [2]. The Ronin network setup had nine validators and required five signatures to authorize withdrawals; the attacker successfully compromised four validators held by Sky Mavis and one third-party validator held by the Axie DAO [2]. ## Common Misconceptions * **Misconception: Bridging actually moves your tokens from one chain to another.** * *Reality:* Blockchains are closed systems. A native token on Ethereum cannot exist on Solana. Bridging simply locks the asset on its native chain and creates a representative token on the destination chain. * **Misconception: Wrapped tokens are just as safe as native tokens.** * *Reality:* Wrapped tokens carry the cumulative risk of both the source chain, the destination chain, and the bridge protocol itself. If the bridge contract is hacked and its collateral drained, the wrapped token becomes unbacked and worthless. * **Misconception: Decentralized bridges are completely immune to censorship and theft.** * *Reality:* While decentralized bridges (like those using light clients) do not rely on trusted custodians, they are still vulnerable to smart contract bugs, logical errors, and protocol-level attacks on the underlying blockchains. ## How Bridges Connect to the Broader Market The security of cross-chain infrastructure is a critical factor for institutional adoption and market liquidity. As capital moves between layer-1 blockchains and layer-2 scaling solutions, bridges act as the primary highways. A major bridge hack does not just affect the bridge users; it can destabilize decentralized exchanges, lending protocols, and stablecoin pegs that rely on wrapped assets as collateral. To mitigate these risks, the industry is moving toward standardized interoperability protocols that reduce reliance on centralized multisigs. For example, some networks are adopting custom verification frameworks to secure institutional transactions across chains [3]. Additionally, users must remain vigilant against social engineering and phishing campaigns that target the credentials of bridge validators and users alike, a topic detailed in [Common Crypto Scams: How to Spot Phishing, Drainers, and Fraud](https://basisdesk.news/learn/common-crypto-scams) [4]. ## FAQ **What is a wrapped token?** A wrapped token is a digital asset minted on a destination blockchain that represents a native asset locked in a vault on a source blockchain, maintained at a 1:1 value ratio. **Why are bridges hacked more often than individual blockchains?** Bridges are highly complex, requiring interactions between different blockchain architectures, and they hold massive, centralized pools of locked collateral that act as attractive targets for hackers. **What is the difference between a multisig bridge and a light client bridge?** A multisig bridge relies on a trusted group of external validators to sign off on transfers, while a light client bridge uses smart contracts to cryptographically verify transactions directly on-chain without intermediaries. ## Sources 1. [Ethereum Foundation: Bridges](https://ethereum.org/developers/docs/bridges/) — Ethereum Foundation 2. [Chainlink CCIP Documentation](https://docs.chain.link/ccip) — Chainlink --- Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai