What Is a Crypto Bridge? How Cross-Chain Transfers Work
A crypto bridge moves tokens between blockchains using lock-and-mint or liquidity pools. Learn how they work, wrapped tokens, and why bridges get hacked.
Key points
- A crypto bridge lets you move tokens from one blockchain to another by locking or burning them on the source chain and issuing or releasing them on the destination chain.
- There are two main models: lock-and-mint, which uses wrapped tokens, and liquidity pools, which swap tokens via pooled funds.
- Bridges are frequent hack targets because they hold large amounts of locked or pooled assets and often rely on complex smart contracts or validator sets.
A crypto bridge is a tool that moves tokens from one blockchain to another. Blockchains like Ethereum and Solana don’t talk to each other natively, so a bridge acts as a translator: it takes your tokens on one chain and gives you equivalent tokens on another. Bridges are essential for using apps on different networks, but they have also become a favorite target for hackers. This guide explains how bridges work, the two main models, and the risks you should know.
Why bridges exist
Each blockchain is a separate ledger. A token that lives on Ethereum cannot be spent on Solana, and vice versa. Without a bridge, you would have to sell your tokens on one chain, move the money through a centralized exchange, and buy the token again on the other chain. That process is slow, expensive, and requires trusting a third party.
Bridges solve this by creating a way to represent your tokens on the destination chain. They don’t actually move the original token; instead, they lock it up on the source chain and issue a new token on the destination chain, or they swap it using a pool of funds. The result feels like a transfer, but the mechanics matter for security.
How lock-and-mint bridges work
The most common model is lock-and-mint. Here’s a simple example:
- You have 1 ETH on Ethereum and want to use it on Polygon.
- You send 1 ETH to a bridge smart contract on Ethereum. The contract locks your ETH in its vault.
- The bridge then mints 1 wrapped ETH (often called WETH or a bridged ETH) on Polygon and sends it to your wallet.
- When you want to go back, you send the wrapped ETH to the bridge on Polygon. The bridge burns it and unlocks your original ETH on Ethereum.
The wrapped token is a claim on the locked ETH. It usually has the same value, but it is not the same asset. If the bridge fails or is hacked, the wrapped token can lose its backing.
Wrapped tokens explained
Wrapped tokens are blockchain tokens that represent another asset. For example, Wrapped Bitcoin (WBTC) is an ERC-20 token on Ethereum that is backed 1:1 by Bitcoin held in custody. Similarly, bridged USDC on Arbitrum is a wrapped version of USDC from Ethereum. Wrapped tokens allow you to use assets from one chain on another, but they depend on the bridge or custodian to hold the original asset safely.
How liquidity pool bridges work
Another model uses liquidity pools instead of locking and minting. In a liquidity pool bridge, there are already funds on both sides of the bridge. When you want to move tokens from Chain A to Chain B, you deposit your tokens into a pool on Chain A, and the bridge pays you from a pool on Chain B. No new tokens are minted; instead, the pools rebalance over time.
This model is often faster and cheaper because it doesn’t require minting or burning. However, it relies on having enough liquidity in the destination pool. If the pool runs dry, you may not be able to complete the transfer, or you may face high slippage.
Practical steps: using a bridge
If you decide to use a bridge, here is a typical process:
- Choose a bridge. Popular options include official bridges from layer-2 networks (like the Arbitrum Bridge) and third-party bridges (like Stargate or Hop). Check fees, supported chains, and security audits.
- Connect your wallet. Make sure your wallet is set to the source chain and you have enough of the native token for gas fees.
- Select the token and amount. Enter how much you want to move. The bridge will show you the estimated fee and the amount you’ll receive on the other side.
- Approve and confirm. You may need to approve the token spending first, then confirm the bridge transaction. This can take a few minutes to an hour, depending on the chains.
- Check your destination wallet. Once the transaction is complete, you should see the wrapped or swapped tokens in your wallet on the destination chain. You may need to add the token contract address manually.
Always test with a small amount first. Bridges are complex, and mistakes can be costly.
Risks and common mistakes
Bridges are high-risk tools. Here are the main dangers:
- Smart contract bugs. A flaw in the bridge’s code can let hackers drain locked funds. Several billion dollars have been stolen from bridges in recent years, according to public reports.
- Validator or oracle compromise. Some bridges rely on a set of validators or an oracle to confirm transfers. If attackers control enough of them, they can approve fake withdrawals.
- Liquidity shortages. In pool-based bridges, if the destination pool lacks funds, your transfer may be stuck or you may get a worse rate.
- Wrapped token depegging. If the bridge is hacked or fails, the wrapped token can trade at a discount because it may no longer be redeemable 1:1.
- Phishing and fake bridges. Scammers create fake bridge websites that steal your wallet credentials. Always double-check the URL and use official links from trusted sources.
- High fees and slippage. Bridging can involve multiple transactions, gas fees on both chains, and slippage if liquidity is low.
Common mistakes include not checking the bridge’s audit history, using a bridge with a single validator, and forgetting to account for gas on the destination chain. Also, never share your seed phrase with any bridge or website.
Why bridges are frequent hack targets
Bridges hold large pools of locked or pooled assets. A single successful attack can net hundreds of millions of dollars, making them attractive to hackers. Moreover, bridges often combine multiple complex components: smart contracts on several chains, off-chain validators, and price oracles. Each component adds potential attack surface. Unlike a simple token contract, a bridge must coordinate state across chains, and a mistake in one part can compromise the whole system.
As of September 30, 2026, bridge security remains an active area of research, with new designs aiming to reduce trust assumptions. But no bridge is completely risk-free.
Summary
Crypto bridges move tokens between blockchains by locking and minting wrapped tokens or by using liquidity pools. They are essential for cross-chain activity but come with significant risks, including smart contract exploits, validator compromises, and liquidity issues. Before using a bridge, research its security model, start with small amounts, and never share your private keys. Bridges are powerful tools, but they require caution.
Disclaimer: This article is for information only and is not investment, financial or trading advice. Cryptocurrency prices are highly volatile. Always do your own research.
