Cross-Chain Bridge
A cross-chain bridge is a protocol that enables the transfer of tokens, data, or arbitrary messages between two separate blockchain networks that do not natively share consensus, allowing assets originating on one chain to be represented and used on another chain.
Blockchains are sovereign systems: Ethereum does not natively know what is happening on Solana, Bitcoin does not natively communicate with Avalanche. Cross-chain bridges solve this interoperability gap by creating mechanisms through which the state of one chain can be proven and acted upon by another.
The most common bridge design is the lock-and-mint model. When a user wants to move one Ether from Ethereum to Arbitrum, the bridge smart contract on Ethereum locks the Ether in a vault and instructs a corresponding contract on Arbitrum to mint a wrapped representation (sometimes called wETH or bridged ETH). To return, the wrapped token is burned on Arbitrum and the original Ether is released from the vault on Ethereum. Variations include burn-and-mint (where the asset does not exist on both chains simultaneously), liquidity pool bridges (where solvers pre-fund destination chains and are later reimbursed), and intent-based bridges that rely on competitive solvers rather than canonical message relays.
Bridges rely on some form of validator or verification mechanism to convey proof from the source chain to the destination chain. The three main approaches are trusted multisig bridges, where a committee of signers attest to cross-chain events; optimistic bridges, where messages are assumed valid unless challenged within a fraud-proof window; and zero-knowledge proof bridges, where cryptographic validity proofs are generated and verified on-chain, offering the strongest trustless guarantees but at higher computational cost.
Cross-chain bridges have been among the most frequently exploited infrastructure components in crypto. Major hacks include the Ronin Network bridge ($625 million, 2022), the Wormhole bridge ($320 million, 2022), and the Nomad bridge ($190 million, 2022). These exploits typically targeted the off-chain validator layer or smart contract logic, underscoring the security risks inherent in building trust bridges between sovereign systems.
In the United States, bridges that facilitate token transfers have attracted regulatory attention. FinCEN has indicated that operators of certain bridging services may qualify as money services businesses and may be subject to Bank Secrecy Act registration and AML obligations. OFAC has also sanctioned Tornado Cash, a smart contract mixer, establishing precedent for applying sanctions to on-chain smart contract infrastructure, which has implications for bridge operators facilitating transfers to sanctioned addresses.