bridge exploit

A bridge exploit is an attack that drains a cross-chain bridge, and collectively these have been the most damaging category of hack in crypto — well over two billion dollars lost across a handful of incidents. The reason bridges are such magnets for attackers is structural: a bridge pools the locked collateral backing an entire chain's worth of wrapped assets, and stands or falls on a single verification assumption. Break that one assumption and the entire pool is yours, with no chain-level defense to stop you.

The root causes cluster into a few patterns. Stolen or insufficient signer keys: the Ronin bridge lost about 625 million dollars in March 2022 when an attacker obtained five of nine validator keys. Flawed proof or signature verification: Wormhole lost about 326 million dollars in February 2022 when a bug let the attacker spoof the guardian signature check and mint 120,000 wrapped ETH out of thin air. Broken initialization or trust logic: the Nomad bridge lost about 190 million dollars in August 2022 when an upgrade set a trusted root to zero, making every fraudulent message 'valid' and triggering a chaotic free-for-all. The Poly Network hack (about 611 million dollars, August 2021, later returned) came from manipulating a privileged keeper function.

The lessons are now well understood, even if not always applied: minimize trusted components (prefer light-client or validity-proof verification over committees), rigorously audit the verification path since that is the crown jewel, add rate limits and time-delayed withdrawals so a drain can be caught and paused, monitor for anomalous mint/unlock volume, and never let an upgrade silently weaken a security invariant. The uncomfortable summary is that interoperability buys composability at the cost of a new, highly-concentrated attack surface.