What Is a Crypto Bridge? Moving Assets Between Blockchains

Crypto bridges let you move assets between blockchains; like sending tokens from Ethereum to Solana or Arbitrum. They're essential infrastructure for a multi-chain world, but they're also the most attacked piece of DeFi. Over $2 billion has been stolen from bridge hacks. Here's how bridges work, why they keep getting exploited, and how to use them safely.

What Is a Crypto Bridge in Simple Terms?

A crypto bridge is a protocol that enables the transfer of tokens and data between different blockchain networks that cannot natively communicate with each other. Bridges use mechanisms like lock-and-mint, burn-and-mint, or liquidity pools to move assets cross-chain. While useful for a multi-chain ecosystem, bridges have been the target of some of the largest hacks in crypto history; including the Ronin ($625M) and Wormhole ($320M) exploits; making security evaluation critical before use.

Why Bridges Are Necessary

Every blockchain is fundamentally its own network. Ethereum doesn't know what's happening on Solana. Bitcoin doesn't know what's happening on either. They have different consensus mechanisms, different programming languages, and different token standards.

But users don't want to be stuck on one chain. Maybe you hold ETH on Ethereum but want to use a DeFi protocol on Arbitrum where fees are cheaper. Maybe you earned tokens on Solana but want to trade them on an Ethereum DEX. Maybe you want to chase yield on a newer chain.

Bridges are the infrastructure that makes cross-chain movement possible. Without them, each blockchain's ecosystem would be completely isolated; separate liquidity, separate users, separate economies. Bridges connect these islands.

How Bridges Work: Lock-and-Mint

The most common bridge mechanism is lock-and-mint:

1. You send your tokens to a smart contract on the source chain (say, Ethereum). Your tokens get locked in that contract.
2. The bridge protocol detects the deposit and sends a message to the destination chain (say, Arbitrum).
3. A smart contract on the destination chain mints new "wrapped" tokens representing your locked tokens.
4. You now have wrapped tokens on the destination chain that you can use freely.
5. To go back, you send the wrapped tokens to the bridge on the destination chain. They get burned, and the bridge releases your original tokens on the source chain.

The critical challenge is step 2; how does the destination chain know the deposit actually happened? Blockchains can't natively read each other's state. The bridge needs some mechanism to verify cross-chain messages, and this is where security models diverge dramatically.

Burn-and-Mint Bridges

A variation is burn-and-mint, where tokens are destroyed on the source chain and newly minted on the destination chain, rather than locked. This model works well for tokens that are natively multi-chain; the token's total supply stays constant across all chains combined.

Circle's Cross-Chain Transfer Protocol (CCTP) uses this model for USDC. When you transfer USDC from Ethereum to Arbitrum via CCTP, the USDC is burned on Ethereum and minted fresh on Arbitrum. Because Circle controls USDC issuance, they can guarantee the mint is backed. No wrapping needed.

This is generally considered safer than lock-and-mint because there's no pool of locked tokens sitting in a contract waiting to be hacked. But it only works for tokens where the issuer supports the bridge mechanism.

Liquidity Network Bridges

A third model avoids locking and minting entirely. Liquidity network bridges like Across and Stargate maintain liquidity pools on multiple chains. When you want to move USDC from Ethereum to Arbitrum:

1. You deposit USDC into the bridge's pool on Ethereum.
2. The bridge releases USDC from its pool on Arbitrum to your address.

No minting, no wrapping. You receive native (or canonical) USDC on the destination chain. The bridge's pools get rebalanced later through relayers and arbitrageurs. These bridges are typically faster (minutes or even seconds) and deliver better token compatibility, but they're limited by the liquidity available in their pools.

Major Bridge Hacks

Bridges have been by far the most attractive target for hackers in crypto. The reason is simple: they hold enormous pools of locked tokens in smart contracts, and their cross-chain verification mechanisms introduce complexity that creates vulnerabilities.

The biggest bridge exploits include:

• Ronin Bridge ($625M, March 2022): The bridge for the Axie Infinity game was secured by 9 validator nodes. Attackers (the North Korean Lazarus Group) compromised 5 of 9 validators; enough to forge withdrawal messages. The hack went unnoticed for six days.
• Wormhole ($320M, February 2022): A bug in the Wormhole bridge's Solana smart contract allowed an attacker to mint 120,000 wrapped ETH on Solana without depositing any real ETH. The backing firm (Jump Trading) covered the losses.
• Nomad ($190M, August 2022): A code update introduced a bug that let anyone forge valid bridge messages. Hundreds of copycats drained the bridge in a "free-for-all" exploit; one of the most chaotic events in DeFi history.
• Harmony Horizon ($100M, June 2022): Another multisig compromise; the bridge was secured by only 2-of-5 multisig, and attackers got 2 keys.

These hacks share common themes: concentrated trust (too few validators), smart contract bugs, and inadequate monitoring. The 2022 bridge hack epidemic prompted serious rethinking of bridge security across the industry.

Security Models: Trusted vs Trustless

Bridges fall on a spectrum of trust assumptions:

• Trusted (externally validated): A set of validators or a multisig signs off on cross-chain messages. You trust that these validators are honest and their keys are secure. The Ronin bridge was "trusted", and the trust was misplaced.
• Optimistic: Cross-chain messages are assumed valid unless challenged. There's a dispute window (typically hours) during which watchers can flag fraudulent messages. Across Protocol uses an optimistic model with UMA's oracle as a backstop.
• Zero-knowledge proof (ZK): Mathematical proofs verify that a transaction happened on the source chain. No trust in validators needed; the math proves it. This is the default design but is computationally expensive and still maturing for cross-chain use.
• Native rollup bridges: For Layer 2 rollups like Arbitrum and Optimism, the "bridge" is inherent to the rollup's design. Withdrawals from L2 to L1 are secured by fraud proofs (optimistic rollups) or validity proofs (ZK rollups). These are the most secure bridges but have long withdrawal periods (7 days for optimistic rollups).

Layer 2 Bridges vs Cross-Chain Bridges

It's important to distinguish between two types of bridging:

Layer 2 bridges move assets between Ethereum and its rollups (Arbitrum, Optimism, Base, zkSync). These bridges inherit Ethereum's security because the rollup's state is clearly validated on Ethereum L1. The canonical bridge for each rollup is extremely secure; but slow. Withdrawing from Arbitrum to Ethereum through the native bridge takes about 7 days because of the fraud proof challenge period.

Cross-chain bridges move assets between fundamentally different blockchains (Ethereum to Solana, Ethereum to Cosmos). These don't share any security guarantees and must rely on their own validation mechanisms; validators, oracles, or proofs.

In practice, most users skip the slow native L2 bridges and use third-party bridges like Across, Stargate, or Hop for speed. These fast bridges handle the complexity behind the scenes, often fronting you tokens on the destination chain immediately and settling through the native bridge later.

How Much Bridging Costs

Bridge costs include:

• Gas fees: You pay gas on the source chain for the deposit transaction. Some bridges also charge gas on the destination chain (though many cover this for you).
• Bridge fees: Most bridges charge 0.04–0.3% of the transfer amount. Liquidity network bridges tend to charge more because they bear inventory risk.
• Slippage: For large transfers, you may receive slightly less on the destination chain due to liquidity constraints.

For most transfers, total costs are under $5–$15 on Layer 2s. Bridging to or from Ethereum mainnet can cost more due to L1 gas. Use bridge aggregators like Bungee or Jumper Exchange to compare routes and find the cheapest option for your specific transfer.

Tips for Safe Bridging

Given the history of bridge exploits, safety should be your priority:

• Use established bridges: Stick to well-known, audited bridges with significant TVL and a clean security track record. Across, Stargate, the native Arbitrum/Optimism bridges, and Circle's CCTP are reasonable choices.
• Start with small amounts: When using a bridge for the first time, send a small test transaction before moving significant funds.
• Double-check URLs: Phishing sites that mimic bridge interfaces are common. Bookmark the official URLs and never click bridge links from social media or search ads.
• Don't bridge more than you need: Every bridge interaction carries risk. Move what you need, when you need it, rather than pre-loading tokens on a chain "just in case."
• Monitor your transaction: Bridges take time; from seconds to minutes (or days for native L2 withdrawals). Don't panic if tokens don't appear immediately. Most bridge UIs have a transaction tracker.
• Use bridge aggregators: Tools like Bungee (Socket), Jumper Exchange, and Li.fi compare routes across multiple bridges to find the best combination of speed, cost, and security.

Bridging and Portfolio Tracking

Bridging makes portfolio tracking harder because the same underlying asset can exist in different forms across different chains. You might have native ETH on Ethereum, bridged ETH on Arbitrum, and WETH in a DeFi position on Base. Three chains, three token representations, one underlying asset.

Clarity helps cut through this complexity by connecting to your wallets and accounts across chains, presenting a unified view of what you own regardless of where it lives. Instead of manually tracking which chain holds what, you get a single dashboard showing your total exposure across all your positions.

What to Do Next

If you're bridging for the first time, use a bridge aggregator like Bungee or Jumper to find the best route. Start with a small amount to a well-established L2 like Arbitrum or Base, where gas is cheap and bridge infrastructure is mature. Bookmark the official bridge URLs and never sign transactions you don't understand.

As you spread assets across multiple chains, keep your entire portfolio visible in one place. Clarity tracks your holdings across chains and protocols, so you always know your complete financial picture; no matter how many bridges your tokens have crossed. Understanding your cross-chain exposure is the foundation for managing risk in a multi-chain world.

Cryptocurrency investments are volatile and carry significant risk. This article is educational and does not constitute financial advice. Do your own research before investing.