Cross-chain bridges have enabled billions in value to move between blockchains. They have also become crypto's most exploited infrastructure, with $2 billion stolen in 2022 alone across 13 separate attacks (Chainalysis). That figure represented 69% of all cryptocurrency stolen that year (Chainalysis).
Understanding why bridges fail so catastrophically reveals why native cross-chain swaps represent a fundamentally different security model.
The Anatomy of Bridge Exploits
Bridge hacks share common patterns. Attackers target the custody mechanisms holding locked assets, the smart contracts minting wrapped tokens, or the validator sets verifying cross-chain messages. The three largest bridge exploits illustrate these vulnerabilities.
Ronin Bridge: $625 Million Lost to Validator Compromise
In March 2022, attackers compromised the Ronin bridge connecting Axie Infinity to Ethereum, stealing $625 million (Elliptic). The bridge used a multisig scheme requiring 5 of 9 validators to sign withdrawals. Sky Mavis, the company behind Axie, controlled four of those validators directly.
Attackers gained access to these four keys plus one additional validator through a phishing attack on a former employee. With five signatures, they drained 173,600 ETH and 25.5 million USDC. The theft went undetected for six days because no monitoring system flagged the unauthorized withdrawals.
Wormhole: $320 Million in Unbacked wETH
The Wormhole bridge lost $320 million in February 2022 when attackers exploited a signature verification bug (CNBC). The exploit allowed them to mint 120,000 wETH on Solana without depositing corresponding ETH on Ethereum.
This attack vector is specific to wrapped token architecture. The minted wETH functioned like real ETH within the Solana ecosystem, but no actual ETH backed it. When the attacker bridged the fabricated wETH back to Ethereum, they drained the real ETH reserves.
Nomad: A $190 Million Free-for-All
The Nomad bridge collapse in August 2022 was unusual in its execution (Google Cloud/Mandiant). A smart contract upgrade introduced a bug that marked any message as valid by default. Once the first attacker discovered this, others simply copied the transaction and replaced the recipient address with their own.
Hundreds of wallets participated in draining the $190 million TVL. Some were professional hackers, others were opportunistic users who saw the exploit spreading on Twitter. The attack demonstrated how a single smart contract bug could instantly expose an entire bridge's reserves.
Why Bridge Architecture Creates These Risks
These exploits share structural causes rooted in how bridges work.
Centralized Custody Points
Bridges lock assets on one chain and mint synthetic representations on another. The locked assets sit in smart contracts or multisig wallets controlled by a small validator set. Ronin's 5-of-9 multisig meant compromising just five keys gave attackers complete control over hundreds of millions in user funds.
Multisig schemes concentrate risk. Whether the threshold is 5-of-9 or 7-of-15, attackers have a defined target: compromise enough signers to reach threshold, then drain everything.
Wrapped Token Smart Contract Risk
Every wrapped asset depends on smart contract logic. Wormhole's signature verification bug and Nomad's message validation flaw show how single code errors can undermine entire systems. Wrapped tokens also create systemic risk within destination chains. When wETH loses its backing, every DeFi protocol holding wETH takes collateral damage.
Message Verification Complexity
Bridges must verify that events on Chain A actually occurred before triggering actions on Chain B. This cross-chain messaging introduces attack surface at every verification step. Light clients, oracle networks, and optimistic verification all have different failure modes, but all require trusting some mechanism to accurately report cross-chain state.
How Native Swaps Eliminate These Attack Vectors
Native cross-chain swaps like Chainflip avoid these vulnerabilities by eliminating bridges entirely. Instead of locking, minting, and burning wrapped tokens, native swaps execute actual asset transfers on each chain.
No Wrapped Tokens, No Unbacking Risk
When you swap BTC for ETH on Chainflip, you receive real ETH deposited to your Ethereum address. No wBTC is minted. No smart contract holds your Bitcoin as collateral for a synthetic token. The swap completes when native assets move on their respective chains.
This means there is no synthetic token that can become unbacked. The Wormhole attack vector does not exist because there is no wrapped token to fraudulently mint.
Threshold Signatures Replace Multisig
Chainflip uses threshold signature schemes (TSS) across 150 validators instead of traditional multisig. Unlike Ronin's 5-of-9 setup, compromising a handful of Chainflip validators gains an attacker nothing. Funds are secured by validators who must reach consensus through the State Chain, with economic incentives aligned through staked FLIP.
The validator set rotates, keys are distributed, and no single party controls enough signing power to unilaterally move funds. This decentralized custody model means there is no centralized custodian to compromise.
Direct Settlement Removes Smart Contract Attack Surface
Bridges depend on complex smart contracts for locking, minting, burning, and message verification. Each contract is potential attack surface. Native swaps bypass this entirely. Chainflip's settlement happens through direct transactions on each native chain, coordinated by the validator network but executed as standard blockchain transfers.
There is no wrapped token contract to exploit. There is no message verification system to spoof. The security model relies on the security of the underlying blockchains themselves.
Comparing Security Models
The difference becomes clear when you examine what an attacker would need to steal funds:
Bridge: Compromise 5-9 multisig keys, OR find a smart contract bug in the locking/minting logic, OR spoof the message verification system.
Native swap: Compromise a supermajority of 150 validators simultaneously, which would require overcoming their individual security practices plus the economic disincentive of losing staked capital.
Since launching native TRX and USDT-TRC20 swaps in June 2026, Chainflip has processed over $8.27 billion in swap volume using this architecture.
What This Means for Cross-Chain Users
Bridge exploits will continue as long as bridges exist. The $2 billion lost in 2022 was not an anomaly but a consequence of architectural choices that concentrate risk in exploitable points.
Native swaps represent a structural solution. By settling in native assets without wrapped tokens, without centralized multisig custody, and without complex cross-chain messaging, they eliminate the attack vectors that have cost users billions.
For users moving assets between chains, the choice is between using infrastructure built on the same model that lost $625 million in a single Ronin exploit, or using native settlement that removes those vulnerabilities entirely.
Resources
Swap - Start swapping native assets
Lending - Borrow against native Bitcoin
Blog - Product updates and announcements
Chainflip Scan - Track swaps and network activity
Website - Explore Chainflip
Earn with Chainflip:
Boost - Earn fees by providing single-sided liquidity with no IL risk
Stablecoin Strategies - Deposit stablecoins and earn optimized yields
Provide Liquidity - Supply assets to Chainflip's liquidity pools
Stake FLIP - Delegate FLIP and earn staking rewards
Find us:
What makes cross-chain bridges vulnerable to hacks?
Bridges concentrate risk in multisig wallets, wrapped token smart contracts, and cross-chain message verification systems. Compromising any of these points can expose all locked funds, as seen in the $625 million Ronin hack where attackers only needed 5 of 9 validator keys.
How do native swaps differ from bridges?
Native swaps execute actual asset transfers on each blockchain without creating wrapped tokens. Instead of locking BTC and minting wBTC, a native swap delivers real BTC on Bitcoin and real ETH on Ethereum, eliminating the smart contract attack surface that bridges depend on.
Why did 69% of crypto theft in 2022 come from bridge hacks?
Bridges hold large amounts of locked assets in centralized custody points, making them high-value targets. Their complex architecture, including multisig schemes, minting contracts, and message verification, creates multiple attack vectors that exploiters have repeatedly compromised.
How does Chainflip secure cross-chain swaps without bridges?
Chainflip uses threshold signature schemes across 150 validators rather than small multisig groups. Funds are secured by validators who must reach consensus through the State Chain, with no centralized custodian and no wrapped tokens that could become unbacked.
Can bridge exploits like Ronin or Wormhole happen on native swap protocols?
The specific attack vectors used in those exploits do not apply to native swap architecture. There are no multisig wallets to compromise for instant fund drainage, and no wrapped tokens to fraudulently mint. An attacker would need to compromise a supermajority of validators simultaneously.
