Lock-and-mint, the standard design
Blockchains are separate systems with no native way to read each other's state. The most common workaround is lock-and-mint: your asset is locked in a contract on the source chain, and an equivalent wrapped token is minted on the destination chain. Bridging back burns the wrapped token and releases the original.
- Lock-and-mint — original locked, wrapped version issued
- Liquidity network — pools on both chains, you swap into the destination asset
- Native issuance — the issuer mints and burns directly across chains
Why bridges get hacked
A bridge concentrates a large pool of locked assets behind one contract or validator set. That makes it the single most valuable target in the ecosystem, and several of the largest crypto exploits on record have been bridge exploits rather than chain failures.
If a bridge holds $500m of locked collateral, breaking its validator set is worth $500m to an attacker. No individual wallet offers a payoff like that.
Using a bridge with less risk
- Prefer well-audited bridges with a long operating history
- Bridge in smaller amounts rather than one large transfer
- Do not leave wrapped assets parked long-term if a native version exists
- Confirm the destination token contract is the canonical one
- Check that the destination chain has enough native gas to move funds afterwards
Wrapped assets are not the original
Wrapped BTC on another chain is a claim backed by a locked BTC, not BTC itself. If the bridge that issued it fails, the wrapped token can lose its peg regardless of what Bitcoin's price does. Treat the bridge as counterparty risk, because that is exactly what it is.