11 bridges interop
11 — Bridges e Interoperabilidade
Como mover value/messages entre chains. *acks de bridge*= maior categoria de loss em crypto. Modelos: lockmint, burnmint, atomic swap, IBC, restakingbased, intentbased.
1. Por que bridges?
Crypto fragmentado: BTC em Bitcoin, ETH em Ethereum, USDC em N chains, etc. Para usuário:
- Mover assets entre chains.
- Liquidity unified.
- Apps interoperáveis (DeFi composability cross-chain).
Bridges resolvem — mas com *rust assumptions diversas*e *istórico de hacks*catastrófico.
2. Modelos de bridge
LockandMint
Asset locked em chain A; "wrapped" version minted em chain B.
Chain A: lock 1 ETH em bridge contract
Chain B: mint 1 wETH (representing the locked ETH)
[reverse: burn wETH em B → unlock ETH em A]Trust: bridge custodian honest + secure.
BurnandMint
Native asset burned em chain A; minted em B. Used for *anonical bridges*(USDC CCTP, USDT recent).
Requires issuer (Circle, Tether) participation.
Liquidity pool / swap
Two-sided liquidity em ambas chains. User swaps em A; liquidity provider releases em B. Stargate (LayerZero) model.
Atomic swaps
HTLCbased. User and counterparty reveal H(x) = h; both legs settle. No bridge custody.
Limitações: requires counter-party in both chains; slow; UX terrível.
IBC (Inter-Blockchain Communication)
Native Cosmos. Light client of each chain runs em other chain → trustless via consensus proofs. Relayer pode ser anyone (no permission).
Optimistic bridges
Like optimistic rollups: assert + challenge window. Across, Connext.
ZK bridges
Validity proofs. Polyhedra, Succinct (formerly Telepathy), zkBridge.
Restaking-based
EigenLayer AVS provides decentralized validators for bridge. EigenLayer + bridge = pooled security.
3. Bridges principais
Wormhole
*ulti-chain message protocol* originalmente Solana ↔ Ethereum.
- *uardian network* 19 entities sign messages.
- Supports 30+ chains.
- *ack fev/2022* US$ 320M minted via signature bypass bug. Jump Trading bailed out.
- Wormhole token (W) airdropped 2024.
- Native tokens: integrated with Circle CCTP, etc.
LayerZero
*ryan Pellegrino 2021* *ltra-light node*model:
- Oracle (Chainlink originally) submits block header.
- Relayer (specific to app) submits proof of message.
- Both must agree → app accepts.
Adopted by: Stargate (own canonical product), thousands of dApps.
*oncerns* oracle + relayer collusion = compromise. Configurable per-app.
ZRO token launched jun/2024.
Axelar (AXL)
*osmos SDK chain*that serves as crosschain hub. Validators sign crosschain messages. Lighter than running each chain's light client. Used by Squid Router, Lifi.
Chainlink CCIP (Cross-Chain Interoperability Protocol)
*hainlink's offering* 2023. Decentralized Oracle Network + Active Risk Management (anti-fraud). Enterprise positioning.
Stargate (LayerZero canonical)
*omposable*crosschain liquidity. Use unified liquidity pools — não wrapped tokens. Top USDC/USDT crosschain bridge.
Across
*isk Labs (UMA team)* Optimistic bridge with relayers fronting capital. *heapest ETH bridge*for L1 ↔ L2. Across token (ACX).
Hyperlane
*odular interoperability* Permissionless deployment of cross-chain messaging entre any chains. ISMs (Interchain Security Modules) configurable.
Connext
*odular* Atomic swaps (CRTstyle). Pivot to intentbased.
Synapse Protocol
Multi-chain bridge + AMM. SYN token.
Multichain (defunct)
Earlier formerly "AnyCallV7", Multichain network. *alted jul2023*after CEO Zhaojun disappeared (arrested in China). US$ 130M+ stucklost.
Hop Protocol
L2 ↔ L2 specialist for Ethereum stack. HOP token.
Bitcoin bridges
- *BTC*(BitGo custody) — biggest BTC representation em Ethereum. ~150k WBTC em circulation. Controversial 2024 management transition to Tron-aligned BiT Global.
- *BTC*(Threshold Network) — decentralized.
- *enBTC*(defunct Ren Protocol).
- *bBTC*(Coinbase, 2024) — new contender.
4. IBC (Inter-Blockchain Communication)
*osmos native* RFC-style spec, native em todas Cosmos SDK chains.
How it works
- *ight client*of chain A runs em chain B (and vice-versa).
- State changes em A produce *ommitment proof*
- Relayer (off-chain, anyone) submits proof to B.
- Chain B verifies proof against A's light client → accepts.
*rustless* cryptographic verification, no third-party custody.
Apps
- *CS-20* Fungible token transfer.
- *CS-721* NFT transfer.
- *CS-27* Interchain accounts (control account em another chain).
- *CS-29* Fee middleware.
- *CS-32* NFT counterpart.
Adoption
100+ chains conectadas (Osmosis, Cosmos Hub, dYdX, Injective, Celestia, etc.). ~US$ 1B+ flowing monthly via IBC.
Limitations
- Only IBC-enabled chains.
- Ethereum mainnet *ot*IBC
native (would need light client of Cosmos chain em Ethereum — gasprohibitive). Bridges like Composable, Gravity Bridge attempt.
5. CCTP (Circle Cross-Chain Transfer Protocol)
*ircle (USDC issuer), 2023* Native burnandmint for USDC.
- Burn USDC em chain A.
- Circle attests.
- Mint USDC em chain B.
*o wrapped USDC*(no USDC.e versions). Solves fragmentation problem.
Supported chains expanding: Ethereum, Arbitrum, Optimism, Base, Polygon, Avalanche, Solana (2025), Sui, Aptos.
*ether*doing similar with native USDT migrations 2024-2025.
6. Native bridges (canonical for L2s)
L2 a Ethereum L1 = rollup bridge nativo.
Optimistic Rollup bridges
Deposit: instant (L1 → L2). Withdraw: *-day challenge window*(or use *ast bridge*like Across, paying premium).
ZK Rollup bridges
Deposit: instant. Withdraw: post-proof verification (~hours).
Liquidity bridges atop native
Across, Hop, Synapse let users skip 7-day window by paying liquidity provider fee.
7. Intent-based architectures
*ew paradigm 20242026* user states *ntent*(e.g., "I want 1 ETH em Base"), *olvers*compete to execute. Crosschain abstracted.
Examples
- *cross V3*(intent settler).
- *noma*(intent-centric L1).
- *rink*(intent infrastructure).
- *kip Protocol*(Cosmos intent + interchain swaps).
- *ungee, Squid Router, LIfI* cross-chain swap aggregators with intent capabilities.
- *owSwap*(intra-chain intent).
- *YdX Chain Abstraction*initiatives.
User benefits: 1click crosschain, MEV protected, gasless options.
8. EigenLayer-based bridges
*ecentralized validation via restaking*
- *mni Network* cross-rollup interop via EigenDA + EigenLayer.
- *yperlane*(optional restaking config).
- *ido CSM*(Community Staking).
Trust assumption: 1/3 of restaked ETH validators must be honest.
9. Bridge hacks — categoria mais cara em crypto
| Date | Bridge | Loss | Cause |
|---|---|---|---|
| 2021-08 | *oly Network* | US$ 611M | Signature bypass; attacker returned funds |
| 2022-02 | *ormhole* | US$ 320M | Signature verification bug (Jump bailout) |
| 2022-03 | *onin (Axie)* | US$ 625M | Validator key compromise (Lazarus N. Korea) |
| 2022-06 | *armony Horizon* | US$ 100M | Multisig 2/5 compromised |
| 2022-08 | *omad* | US$ 190M | Initialization bug → anyone could spoof messages |
| 2022-10 | *NB Bridge* | US$ 570M | Proof verification bug (post-chain halt, ~$100M extracted) |
| 2023-07 | *ultichain* | US$ 130M+ | CEO disappeared with keys |
| 2023-09 | *ECO Bridge*(Huobi) | US$ 87M | Private key compromise |
| 2024-01 | *rbit Chain* | US$ 82M | Signer key compromise |
| 2024-07 | *azirX*(Indian exchange, custodial) | US$ 230M | Lazarus |
| 2025-02 | *ybit hack* | US$ 1.5B | Cold wallet signer compromise, largest exchange hack ever |
*azarus Group*(N. Korean state APT) é attribu of vast majority of bridge hacks 2022-2025.
Why bridges are vulnerable
- *igh-value honeypot* contains assets de duas chains.
- *omplex multi-chain logic* more attack surface.
- *rust assumption*vendido como "decentralized" mas frequently small validator set.
- *ignature verification bugs* state machine errors em complex flows.
Vitalik's view
2022 reddit post: "I think bridges are fundamentally limited compared to L2s..." Argued multichain world more vulnerable than rollup-centric.
10. Trusted vs trustless tradeoff
| Type | Trust assumption | Speed | Cost |
|---|---|---|---|
| Custodial (Coinbase, Binance) | 1 entity | Fast | Free-ish |
| Federated multisig | n |
Fast | Cheap |
| Optimistic | ≥1 honest watcher | Hours-days | Cheap |
| ZK | Math + prover honest | Minutes-hours | Higher (proof) |
| IBC / light client | Both chain consensuses | Minutes | Cheap |
| Restaking-based | EigenLayer slashing | Minutes | Varies |
| Atomic swap | HTLC timeouts | Minutes-hours | Cheap |
11. CCIP, Wormhole, LayerZero — comparison
| Aspect | CCIP | Wormhole | LayerZero |
|---|---|---|---|
| Security model | DON + ARM (anti-fraud) | 19 Guardians | Oracle + Relayer (per-app) |
| Throughput | ~minutes | ~minutes | ~minutes |
| Chain count | 15+ | 30+ | 70+ |
| Pricing | LINK | W token + native fee | LZ token + native fee |
| Adoption | Enterprise | Solana + multi-chain | Largest dApp adoption |
| History | No major hack | US$ 320M 2022 | Generally clean |
| Tokenized | LINK (utility) | W (utility) | ZRO (utility) |
12. Cross-chain TVL
Total locked em bridges (excluding canonical L2 bridges):
- ~US$ 30B em production bridges (mai/2026).
- WBTC alone ~US$ 10B equivalent.
- LayerZero ecosystem ~US$ 5B locked.
- Stargate ~US$ 1B.
Plus canonical L2 bridges: ~US$ 50B em ArbitrumOptimismBase/zkSync L1 bridges.
13. Best practices para usar bridges
✅ *se canonical bridges*when possible (L2 official, CCTP, native IBC). ✅ Verify URL (phishing common). ✅ Approve only required amount (não infinite approval). ✅ Verify destination chain ID. ✅ Test with small amount first. ✅ Wait for confirmations recommended (~6 BTC, ~32 ETH blocks for finality). ❌ Don't use random new bridges without audit + bounty. ❌ Don't bridge highly volatile thin liquidity pairs.
14. Future trends
Native chain abstraction
User não pensa em "chains". Wallet + intents handle multi-chain seamlessly. NEAR pushing thesis hard.
Cross-rollup interop
Ethereum L2 ↔ L2 hoje requer bridge. Pushes for:
- *ative rollup standard*(EIP-7702, etc.).
- *hared sequencers*(Espresso, Astria) → atomic cross-L2.
- *P Superchain*(intra
OPStack). - *ggLayer*(intra
PolygonCDK).
PQC bridges
Bridge cryptography must migrate to PQC. Long-term assets at HNDL risk.
Unified liquidity
Stargatestyle + CCTPstyle: single canonical version of stablecoins across chains.
Restaking interop
EigenLayer AVS-based bridges multiplied 2024+ (e.g., Polyhedra, Omni).
15. WormholeLayerZeroAxelar code samples
Sending message via LayerZero (OFT — Omnichain Fungible Token)
contract MyOFT is OFT {
function send(uint16 dstChainId, bytes memory to, uint256 amount) external payable {
_send(msg.sender, dstChainId, to, amount, payable(msg.sender), address(0), bytes(""));
}
}IBC ICS-20 transfer (Cosmos)
msg := &types.MsgTransfer{
SourcePort: "transfer",
SourceChannel: "channel-0",
Token: sdk.NewCoin("uatom", math.NewInt(1000000)),
Sender: senderAddr.String(),
Receiver: receiverAddr.String(),
TimeoutHeight: clienttypes.NewHeight(0, 100),
}16. Referência cruzada
- L1s connecting via bridges:
04-l1-bitcoin.md,05-l1-ethereum.md,06-l1-alt.md. - L2 native bridges (rollup withdraw):
07-l2-scaling.md. - Hacks detalhados:
14-incidentes.md. - Restaking + EigenLayer:
07-l2-scaling.md§Restaking. - IBC + Cosmos:
06-l1-alt.md§Cosmos.