Cross-chain bridges are essential infrastructure that let users move assets between different blockchains, but they've become the single most exploited category in crypto, with five major incidents alone totaling more than $2.3 billion in losses. A bridge works by locking an asset on one blockchain and minting a wrapped version on another, collapsing what would otherwise require a centralized exchange into a single transaction. Yet this convenience comes with a structural security problem that experts warn may never be fully solved.

What Exactly Is a Cross-Chain Bridge, and Why Do We Need Them?

Each blockchain, from Bitcoin to Ethereum to Solana, runs its own independent ledger and validation rules. This isolation is intentional; it's what gives each network its security model. But it also means an asset issued on one chain can't natively move to another without outside help. A bridge fills that gap by using one of several mechanisms to make an asset usable on a destination chain while keeping the accounting balanced.

The most common approach, called lock-and-mint, locks the original token in a smart contract on the source chain and mints a matching wrapped token on the destination chain. Wrapped Bitcoin (WBTC), for example, represents actual Bitcoin held in custody on Ethereum. Other designs use burn-and-mint models, which destroy the token on the source chain and create a native version on the destination, or liquidity pools that hold reserves on both sides and swap between them.

Without bridges, users would have to route everything through a centralized exchange: deposit on chain A, sell for a stablecoin, withdraw and rebuy on chain B. That means giving up custody twice and paying two sets of fees. Bridges collapse that into a single transaction while users typically keep control of their private keys the whole time. According to DefiLlama's bridge tracker, cross-chain transfers moved roughly $350 million in a single 24-hour period as of August 2026, with the Across protocol alone handling close to half of that volume.

Why Have Bridges Become Crypto's Most Expensive Hack Target?

The answer lies in two structural realities. First, a bridge concentrates value in one place: the locked or pooled assets backing every wrapped token in circulation. Second, bridge code is newer and more experimental than the base blockchains it connects. That combination has made bridges uniquely attractive to attackers and uniquely vulnerable to bugs.

The numbers tell a stark story. The Ronin bridge lost $624 million in March 2022 after attackers compromised validator private keys. Poly Network lost $611 million in 2021 to an access-control flaw. Binance's BNB Bridge lost $586 million when attackers forged withdrawal proofs. The Wormhole bridge lost $320 million after a Solana signature-verification bug let an attacker mint tokens with no backing. Nomad lost another $190 million in 2022 when a faulty upgrade let anyone copy a valid transaction and drain funds. Those five incidents alone add up to more than $2.3 billion.

Ethereum co-founder Vitalik Buterin flagged the fundamental reason for this vulnerability back in January 2022. He argued that bridged assets don't inherit the security of the chain they came from. "Suppose that you have 100 ETH on Ethereum, and Ethereum gets 51% attacked, so some transactions get censored and/or reverted. No matter what happens, you still have your 100 ETH," Buterin explained, contrasting that with a bridge, where an attack on either connected chain can leave the wrapped asset under-collateralized. "There are fundamental limits to the security of bridges that hop across multiple zones of sovereignty," he added.

How Do Different Bridge Designs Handle Security Trade-Offs?

Every bridge ultimately answers the same question differently: who or what verifies that a transfer is legitimate? The answer determines both how fast the bridge is and how much you have to trust it.

• Trusted Bridges: A known operator or multisig group verifies transfers. They're fast and simple, but you're trusting a small group not to censor or steal funds, making them effectively a custodial service wearing a different name.
• Trust-Minimized Bridges: Cryptographic proofs of the source chain's state verify transfers. They offer stronger security guarantees, but they're harder to build and often slower than trusted alternatives.
• Liquidity Network Bridges: Market makers holding reserves on both sides verify transfers. Settlement is quick, but the bridge is capped by available liquidity on each side.
• Optimistic Bridges: Transfers are assumed valid unless challenged within a dispute window. They're cheap to run, but funds sit through a dispute period, similar to how optimistic rollups use fraud proofs.

The distinction between custody you hold and custody someone else holds runs through nearly every bridge decision, the same way it runs through the choice between a custodial and a non-custodial wallet. Trusted bridges are effectively a custodial service; you're handing an asset to a party you don't control in exchange for a claim on another chain.

How to Evaluate Bridge Risk Before Moving Assets Across Chains

• Check the Bridge Type: Understand whether the bridge uses a trusted model with a known operator, a trust-minimized cryptographic proof system, a liquidity pool design, or an optimistic approach. Each has different security and speed trade-offs that affect your risk exposure.
• Review the Exploit History: Research whether the bridge or its operators have experienced previous security incidents, validator compromises, or code vulnerabilities. A track record of successful audits and incident response matters more than the absence of any attack.
• Assess the Liquidity and Collateralization: For liquidity pool bridges, verify that reserves are sufficient to cover your transfer size. For lock-and-mint bridges, confirm that the backing assets are actually held in custody and regularly audited by independent firms.
• Understand the Custody Model: Determine whether you're trusting a centralized operator, a multisig group, or a decentralized validator set. The more parties required to approve a transaction, the harder it is for a single attacker to drain funds, but the slower the bridge typically becomes.

Security researchers now push protocols toward the trust-minimized end of the spectrum, where cryptographic proofs replace human judgment. However, even trust-minimized designs can fail if the underlying code has bugs, as the Wormhole exploit demonstrated.

The reality is that bridges solve a real problem: they let users move assets between blockchains without routing through a centralized exchange. But that solution comes with a security cost that hasn't been fully resolved. As long as bridges concentrate value and rely on newer, more experimental code than the base chains they connect, they will remain attractive targets for attackers. The choice to use a bridge isn't about finding a perfectly safe option; it's about understanding the specific risks of each design and deciding whether the convenience is worth the trade-off.