Bridges and Cross-Chain Risks: Moving Funds Across Blockchains
What blockchain bridges do, why they're the most hacked component in crypto, and the specific risks they create for gambling users moving funds between chains.
Crypto gambling has spread across dozens of blockchains — Ethereum, Arbitrum, Polygon, Solana, Tron, and more. When the game you want is on a different chain than the funds you hold, a bridge is the mechanism that moves them. Bridges are also, historically, the most catastrophically hacked component in the entire crypto ecosystem. Understanding how they work and why they fail is essential before you route gambling funds across chains.
What a Bridge Does
A blockchain bridge is a protocol that lets you transfer assets between two independent blockchains that cannot natively communicate with each other.
Because blockchains are isolated systems — Ethereum cannot read Solana’s state, and vice versa — there is no native way to “send ETH to Solana.” Instead, bridges use a locking mechanism:
- You deposit ETH into a bridge contract on Ethereum
- The bridge mints a wrapped or synthetic token on the destination chain representing your locked ETH
- You use the wrapped token on the destination chain
- To exit, you burn the wrapped token and the bridge releases your original ETH on Ethereum
The wrapped asset is only as valuable as the bridge’s ability to honor redemptions. If the bridge is hacked and the locked assets are stolen, the wrapped tokens become worthless — even though they look fine in your wallet.
Types of Bridges
Not all bridges use the same trust model:
| Bridge type | How it works | Trust assumption |
|---|---|---|
| Centralized / custodial | A company holds assets on both sides | Trust the company |
| Multi-sig | A set of signers must approve transfers | Trust the majority of signers |
| Optimistic (e.g., Hop, Across) | Transfers assumed valid unless challenged | Trust the fraud proof window |
| Light client / ZK bridges | Cryptographic proofs verify the other chain’s state | Trust the math and implementation |
Light client bridges are theoretically the most trustless but are complex to build and not yet widely deployed. Most bridges in production today use multi-sig or optimistic designs, both of which have meaningful centralization and attack surface.
The Hack Record
Bridges have been the largest source of funds stolen in crypto by a significant margin. Several notable incidents illustrate the failure modes:
- Ronin Bridge (2022): $625 million stolen. Attackers compromised 5 of 9 multi-sig validator keys through social engineering. The theft went undetected for 6 days.
- Wormhole Bridge (2022): $320 million stolen. A bug in the Solana smart contract allowed an attacker to mint wrapped ETH without depositing real ETH.
- Nomad Bridge (2022): $190 million stolen. A configuration error meant any message could be processed as valid — hundreds of attackers drained the bridge in a chaotic free-for-all over hours.
- Harmony Horizon Bridge (2022): $100 million stolen. Two of five multi-sig keys were compromised, meeting the threshold.
The amounts involved dwarf most DeFi exploits. Bridges concentrate enormous value (all the locked collateral) while simultaneously presenting a large technical attack surface (complex cross-chain messaging logic) and often a small trust set (few multi-sig signers).
2022 saw roughly $2 billion stolen from bridges in aggregate. The figure has varied in subsequent years, but bridge exploits remain a persistent and severe risk in the ecosystem.
How This Affects Gambling Users Specifically
Moving Funds to a Different Chain’s Casino
If your ETH is on Ethereum mainnet and you want to play at a casino on Arbitrum, you have options:
- Use the official Arbitrum bridge: Deposits are fast (minutes); withdrawals back to Ethereum take 7 days due to the fraud proof window (see Layer-2s and Low-Fee Chains).
- Use a third-party “fast bridge” (Hop, Across, Stargate): These use liquidity pools to give you immediate access on the destination, eliminating the 7-day wait. But they introduce an additional smart contract and counterparty.
- Buy directly on the destination chain: If you’re using a centralized exchange that supports withdrawals to Arbitrum, you avoid bridging altogether.
Option 3 avoids bridge risk entirely. Where possible, depositing native assets directly to the target chain is safer than bridging.
Wrapped Tokens and What They Actually Are
When you hold WETH (Wrapped ETH), USDT.e (bridged USDT), or any token with a prefix/suffix indicating it crossed a bridge, you hold a claim on the bridge’s locked collateral. The token is not ETH — it is a representation of ETH that depends on the bridge remaining solvent and functional.
Some gambling sites accept bridged versions of tokens without clearly communicating that distinction. If you’re unsure, check the token contract address on a block explorer and trace where it came from.
Withdrawal Risk After Playing
If you win funds and want to move them back to your home chain, you’re crossing the bridge again in reverse. The risk is symmetric: the bridge could fail in either direction.
For significant winnings, consider whether withdrawing to the most trusted and liquid network first (generally Ethereum mainnet, even with a delay) is worth the security improvement over using a faster but riskier third-party bridge.
Practical Risk Reduction
You cannot eliminate bridge risk if you’re moving assets across chains, but you can reduce exposure:
- Minimize time in transit: Don’t leave assets sitting in a bridge contract longer than needed.
- Prefer native deposits: Withdraw from exchanges directly to your target chain when possible.
- Use official bridges for L2s: The Arbitrum bridge, Optimism bridge, and Base bridge are maintained by the chains’ developers and have stronger security track records than third-party alternatives.
- Check audit status: Before using any bridge, search for its most recent security audit. No audit is a red flag; an old audit is a yellow flag.
- Don’t bridge more than you intend to use: Bridges are not storage. Move what you need for a session; withdraw the rest.
Putting Bridge Risk in Context
For a typical gambling session — depositing $100 to an Arbitrum casino — the bridge risk is real but proportionate. The Arbitrum native bridge is one of the better-audited pieces of infrastructure in the ecosystem. The dollar amount at risk during transit is limited.
The risk scales with the amount and the bridge chosen. Moving large amounts through obscure or unaudited bridges to reach a casino offering a slightly better bonus is a bad trade. The risks and harms section covers how these infrastructure risks combine with gambling-specific risks for a fuller picture.
Bridges are a necessary evil for a multi-chain ecosystem — but “necessary” doesn’t mean “safe.” Treat every cross-chain transfer as a step that carries its own independent risk, separate from the casino you’re using. And before committing significant funds to any chain’s gambling ecosystem, check whether the gains are worth the infrastructure exposure. For perspective on managing all these risks together, visit responsible gambling.