MSTR Cat

Blockchain/Level VIII · The memecoin age/8.1 Solana's story/Lesson 3

Wormhole and the bridge hacks

The custody chain that breaks when the code fails

MaterialsThe Wormhole incident report from February 2022Chainalysis Crypto Crime Report (2023) section on cross-chain bridge hacksA block explorer interface for Ethereum or Solana to trace wrapped token contracts

Wonder

  1. What is a wrapped asset if not a claim on a bridge’s custody and code?
  2. How does a signature-verification bug allow an attacker to mint tokens without collateral?
  3. Why are bridges the most attacked part of a multi-chain world?

Explore

  1. A bridge holds coins on one chain and issues tokens on another. The wrapped asset is not the original coin; it is a claim on the bridge’s custody and code. If the code fails, the claim becomes worthless. This mechanism fragments liquidity across chains but introduces a critical dependency: the user must trust that the bridge’s operators and code will not fail or be compromised.
  2. On 2 February 2022, an attacker exploited a signature-verification bug in Wormhole’s Solana contract. The bug allowed the minting of 120,000 wrapped ETH without collateral, valued at approximately $320 million. Jump Crypto, Wormhole’s backer, replaced the funds to maintain confidence in the ecosystem. This incident demonstrated that a single line of faulty code can drain a bridge’s entire backing.
  3. Bridge thefts were the largest category of crypto hacks in 2022. The Ronin bridge suffered a loss of about $600 million in March, and the BNB Token Hub lost funds in October. These events revealed that as multi-chain complexity grows, so does the attack surface. Bridges become high-value targets because they concentrate liquidity from multiple chains into a single point of failure.
  4. The security model of a bridge depends on its trust assumptions. Some bridges use trusted operators who can theoretically collude to steal funds or censor transactions. Others use light-client verification or optimistic validation, which trade speed for security. The choice of mechanism determines the risk profile: higher decentralization often means slower finality and more complex implementation.
  5. Users interact with bridges by locking assets in a contract and receiving wrapped tokens on another chain. This process grants approval to the bridge contract, creating ongoing exposure if the user does not revoke it. Holding wrapped tokens long-term keeps that exposure open. The trade-off is between convenience of cross-chain access and the security burden of managing multiple custodial layers.
  6. To verify this architecture, open a block explorer for any major chain. Locate a wrapped token transaction. Trace the contract address that issued it. Check the audit reports and security assessments associated with that bridge. Note the number of operators or validators required to approve transactions. This inspection reveals the specific trust assumptions underlying the asset’s value.

Key facts

  • A wrapped asset is a claim on a bridge’s custody and code, not the original coin.
  • The Wormhole exploit in February 2022 minted 120,000 wrapped ETH worth about $320 million without collateral.
  • Jump Crypto replaced the funds lost in the Wormhole hack to maintain ecosystem confidence.
  • Bridge thefts were the largest category of crypto hacks in 2022, including Ronin and BNB Token Hub.
  • Trusted bridges carry counterparty risk where operators can theoretically collude or censor transactions.
  • Holding wrapped tokens long-term keeps exposure to the bridge’s code and operators.

Exercise nine, six, three, one

9CollectList 9 distinct risks associated with using a cross-chain bridge, such as smart contract bugs, operator collusion, or censorship. For each risk, note the specific mechanism by which it causes loss of funds or access.
6ClusterGroup the 9 risks into 6 categories based on their source: code defects, human error, malicious intent, systemic failure, economic incentives, or user behavior.
3DistillReduce the 6 categories to 3 core design principles that mitigate bridge risk. Focus on how trust assumptions are minimized and security is verified independently of the operator.
1CrystallizeWrite 1 sentence explaining why a wrapped asset’s value depends entirely on the integrity of its underlying bridge code and operators.

Fact check

Dates, figures and claims checked against the published sources listed below.

Open in the interactive academy →

PT ES ZH JA KO RU DE FR MS