Bridge risk: wrapped tokens, validators and the cost of crossing

Why bridges exist, and why they concentrate risk

Each blockchain keeps its own ledger. A token on one chain cannot move to another on its own; instead, a bridge records that it was locked or destroyed on the first chain and creates a matching token on the second. Something has to verify that the first event really happened, and that verifier is where most of the trust sits.

Because a bridge holds everything locked on the source chain, it can hold far more value than any single user's position. That makes it an attractive target, and a single failure can affect every holder of the bridged token at once, including people who never used the bridge themselves.

Four common bridge designs

Bridges differ mainly in how they verify transfers and where the backing sits. The design tells you who you are trusting.

A bridge's documentation usually says how many verifiers exist and how many must agree before a transfer is released. A design where a handful of keys can approve any message carries a very different risk from one that checks the source chain's own records, even if both show the same interface.

A wrapped token is a claim, not the asset

A wrapped token on the destination chain is worth what it can be redeemed for on the source chain. As long as every wrapped token is matched by a locked original, the two should trade close together. If that match breaks, the wrapped token becomes a partial claim.

Here is an illustration. A bridge has 100,000 units locked and 100,000 wrapped tokens in circulation, so backing is 1.00 per token. An attacker exploits a verification bug and mints 50,000 extra wrapped tokens with nothing locked behind them. There are now 150,000 wrapped tokens against 100,000 locked units: backing falls to 100,000 ÷ 150,000 = about 0.67 per token.

In practice, holders who redeem first may get full value until the locked pool runs out, while later holders get nothing. The market price of the wrapped token can fall below its backing ratio as people race to exit, and any lending market that accepts it as collateral inherits the problem.

How a bridge failure typically unfolds

Bridge incidents tend to follow a recognizable sequence, though the details vary. Knowing the sequence explains why losses spread so quickly beyond the bridge itself.

The steps below can unfold within minutes. By the time a pause takes effect, the damage has often moved into other protocols that accepted the bridged token in good faith.

• The verifier is compromised. Signing keys are stolen, or a flaw lets a fake deposit message pass as real.
• Unbacked tokens appear. Wrapped tokens are minted, or locked tokens released, without a matching event on the other chain.
• The attacker sells fast. Tokens are swapped in liquidity pools or used as collateral before the bridge is paused.
• Pools and lenders absorb the damage. Liquidity providers end up with devalued wrapped tokens, and lenders with bad debt.
• The bridge pauses. Honest users with funds in transit may wait while the operators work out what is still backed.

The everyday cost of crossing

Even without a failure, bridging has costs: a percentage fee, a fixed fee, gas on both chains and slippage if a swap is involved. For illustration, moving $5,000 with a 0.1% bridge fee, a $2 fixed fee, $8 of gas on the source chain, $1 on the destination and 0.05% slippage costs $7.50 + $11.00 = $18.50, or 0.37%. You receive $4,981.50.

The same route for $500 costs $0.75 + $11.00 = $11.75, or 2.35%, because the fixed parts do not shrink. On these assumptions, a transfer needs to be at least about $1,294 to keep total costs under 1%. The bridge costs calculator runs these numbers with your own inputs, and the gas breakeven calculator shows how long a higher yield on the other side would take to repay them.

Time in transit is a risk too

Some bridges wait for the source chain to reach finality, or impose a challenge period, before releasing funds. Transfers can take minutes or, on some designs, days. During that time the price of what you are moving can change, and you cannot easily cancel.

This is the core difficulty in cross-chain arbitrage: a price gap that looks profitable at the start can close, or reverse, before the funds arrive.

Fake bridges and look-alike websites

Not every bridge loss comes from the bridge. Fake sites that imitate a real bridge's interface ask users to approve a malicious contract or send funds to an attacker's address. The OSC's investor site warns that fraudulent platforms can look very similar to legitimate ones and that scammers seek crypto wallet details.

Search ads and links in social media replies are common routes to look-alike sites. Bookmarking known addresses and checking the contract you are approving are covered in wallet security.

Tax and records when you bridge

The Canada Revenue Agency's crypto pages do not address bridging or wrapped tokens specifically. Whether swapping a token for its wrapped version is a disposition is not answered in that guidance, so it is worth keeping full records of each step: amounts, dates, CAD values, fees and both wallet addresses.

Bridge fees and gas may affect your adjusted cost base. The ACB calculator shows how fees are added, and the methodology page explains the assumptions the site makes where official guidance is silent.

Questions to ask before you deposit

• How does this bridge verify transfers, and how many independent parties must agree?
• What backs the wrapped token you will receive, and can you check the locked balance?
• Is the token on the destination chain issued natively, or is it a wrapped claim?
• How long can a transfer take, and can it be paused?
• What will the crossing cost in total, including gas on both chains?
• Are you on the bridge's genuine website, reached from a saved bookmark?