A blockchain bridge can fail when the people, software, or processes that authorize cross-chain transfers stop working as intended. The result may be stolen assets, destination-chain tokens with inadequate backing, frozen withdrawals, or a user mistake that cannot be reversed. The connected blockchains may still be operating normally: the bridge adds its own trust and security layers, and losses depend on who controls those layers and what the bridge can do.
What is a bridge supposed to do?
A bridge coordinates assets or messages between separate blockchains. It does not necessarily move the original asset from one chain to another. Depending on its design, it might hold assets in custody, lock an asset on one chain and mint a representation on another, burn and mint tokens, rely on liquidity, or use contracts and relayers to verify messages.
As an Amazon Associate I earn from qualifying purchases.
Those designs have different trust assumptions. A token displayed on a destination chain may depend on assets held elsewhere, on a pool of available liquidity, or on the correctness of a cross-chain message. The destination chain’s own security does not prove that the bridge’s messages are valid or its assets adequately backed.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches| Bridge approach | What coordinates the transfer | What can go wrong |
|---|---|---|
| Centrally operated or “trusted” | A central system controls or coordinates asset and data transfers. | Custody, censorship, collusion, cyberattack, faulty code, or transaction errors can affect users. |
| Contract- or algorithm-based, often called “trustless” | Contracts or algorithms handle some actions without a central operator. | Code, algorithm, validation, upgrade, and user-error risks remain. |
| Lock and mint | An asset is locked on one chain and a representation is minted on another. | If message validation fails, tokens may be released or minted without valid backing. |
| Liquidity-based | Liquidity is used to provide assets on the destination side. | Insufficient liquidity can delay or block a transfer or withdrawal, even without an exploit. |
These are not mutually exclusive categories. “Trusted” and “trustless” describe broad assumptions, not security grades; a bridge can combine several mechanisms.
#1 Best Overall
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
How do blockchain bridges fail?
“Bridge failure” is broader than “bridge hack.” Some incidents involve unauthorized control or a software defect; others involve unavailable services, inadequate liquidity, or mistakes made during a transaction.
Compromised keys, signers, or validators
If a bridge relies on a group of signers or validators to authorize messages or releases, stolen keys, collusion, or a compromised quorum can allow unauthorized transfers. A reader evaluating a bridge should find out who can approve an action and how many independent parties must agree.
Faulty message verification
A bridge must decide whether a message from one chain is genuine before it acts on that message elsewhere. If the verification rule accepts a forged or invalid message, the bridge may release assets or mint a destination-chain representation without a legitimate transfer behind it.
Recommended Free Tools
Contract, algorithm, or business-logic defects
Even when no central operator controls a transfer, a defect in a contract or algorithm can produce an unsafe result. The flaw might be in how messages are checked, how assets are accounted for, or how a particular function behaves. A design that removes one kind of operator control does not remove software risk.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Underlying-chain vulnerabilities
A bridge also depends on the chains and data it uses. If a connected chain or a component supplying information about it is compromised, the bridge may act on information that should not be trusted. Bridge security and connected-chain security are related, but they are not the same thing.
Operational failure, liquidity shortfall, or user error
A service interruption can leave a transfer delayed or a withdrawal blocked. A liquidity shortage can make assets difficult to withdraw without any attacker stealing them. A user can also make an irreversible transaction mistake. These outcomes matter to users, but they should not all be described as theft or a protocol exploit.
What can users lose when a bridge fails?
- Assets held by the bridge: If an attacker obtains authority to release or transfer custody-held assets, users may lose the assets they deposited or expected to withdraw.
- Value in a wrapped or destination-chain token: If that representation is no longer adequately backed, it may lose confidence or value. The underlying asset does not automatically reappear because a token remains visible on the destination chain.
- Access to funds: A paused service, blocked withdrawal, or liquidity shortage can make assets inaccessible. That is different from proof that the assets have been stolen.
- Funds sent in a user mistake: An erroneous transaction may be difficult or impossible to reverse, depending on the design and circumstances.
Who loses depends on the bridge’s custody, backing, authorization, and recovery arrangements. A user may bear a direct loss; an operator, sponsor, or other party may return or reimburse some assets in a particular incident. The fact that someone has returned funds does not by itself establish a general duty to compensate users.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →What does the Nomad exploit show?
Nomad illustrates how a message-verification defect can turn into an asset drain. In an incident analysis published on August 9, 2022, Coinbase authors Peter Kacherginsky and Heidi Wilder described Nomad as using on-chain contracts together with off-chain agents that relayed and verified messages. Their analysis says a contract initialization left a zero entry accepted as a trusted root. A later change to message processing meant a fraudulent message with a missing or null entry could pass the check, after which attackers submitted messages that caused the bridge to send stored tokens.
Rank #3
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
Coinbase reported that more than $186 million in ERC-20 assets were stolen from August 1, 2022, 21:32 UTC, through August 2, 2022, 05:49 UTC. In the same analysis, the authors said that as of August 9, 2022, 17% of the assets stolen from the Nomad Bridge contract had been returned, including partial returns. That dated recovery figure is neither a general recovery rate nor evidence that affected users were made whole.
Who pays when a crypto bridge is hacked?
There is no universal answer established here. The outcome depends on the incident, the bridge’s terms and arrangements, the parties involved, and the applicable law. Users can bear losses when assets are stolen, backing fails, or access is suspended. Operators and signers may face operational, reputational, or potentially legal consequences, but that does not automatically determine who owes users money.
In the United States, the Treasury’s October 3, 2022 release about the Financial Stability Oversight Council report describes a review of digital-asset financial-stability risks and regulatory gaps. That broad policy context is not a bridge-specific ruling on liability or a guarantee of recovery. A legal conclusion for a particular user requires current, jurisdiction- and case-specific information.
How large have reported bridge losses been?
Published figures describe different samples and time periods, so they should not be combined into a single current total.
Rank #4
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
- Survey sample: The 2024 academic survey SoK: Cross-Chain Bridging Architectural Design Flaws and Mitigations, by Notland, Li, Nowostawski, and Haro, examined 60 bridges and 34 exploits from 2021–2023. It identified 13 architectural components and eight vulnerability types. These are the survey’s sample and taxonomy, not a count of every bridge or incident.
- 2022 incident estimate: Beosin’s Global Web3 Security Report 2022, published in 2023, counted 12 cross-chain bridge security incidents causing approximately $1.89 billion in losses in 2022. Beosin identified validation issues, blockchain vulnerabilities, and business-logic or function-design issues among leading causes. Other reports may use different definitions and totals.
- Report-era cumulative estimate: The European Blockchain Observatory and Forum’s 2023 report, The current state of interoperability between blockchain networks, reported more than USD 2.5 billion stolen through bridge vulnerabilities and listed selected examples including Ronin, Wormhole, Nomad, and Binance. This is a figure from that report, not a current 2026 aggregate.
Incident counts can vary because authors define bridge exploits and the boundaries of reported incidents differently. These historical figures show the scale reported by their publishers; they do not establish a live total for 2026.
How can you assess a bridge before using it?
Look for concrete answers about control, verification, and recovery rather than relying on a “trusted” or “trustless” label or an audit count.
- Withdrawal authority: Who can authorize a withdrawal or cross-chain message? How many independent signers or validators must agree?
- Message verification: Are messages checked using source-chain proofs, a validator quorum, a multisignature arrangement, or another mechanism? What happens if verification is wrong or unavailable?
- Custody and control: Who holds locked assets? Can an operator freeze, censor, upgrade, or redirect them?
- Contracts and upgrades: Which contracts can change, who can authorize a change, and what delay or emergency process applies?
- Monitoring and incident response: Are monitoring, incident-response procedures, and recovery arrangements documented?
- Backing and liquidity: What backs destination-chain representations, and how would a shortfall or liquidity problem become visible?
No single answer guarantees safety. Assess the bridge’s particular design and controls for the action you plan to take, separately from the security of either connected blockchain.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
