DeFi

Cross-Chain Bridge

A cross-chain bridge transfers value or messages between blockchains using locks, burns, mints, validators, relayers, proofs, or messaging protocols.

A cross-chain bridge lets assets or messages move between chains, but it adds new trust assumptions.

Cross-Chain Bridge Explained in Detail

A cross-chain bridge connects two or more chains. It may lock tokens on one chain and mint wrapped tokens on another, or it may send arbitrary messages between contracts.

The bridge must decide which messages are authentic and whether each message has already been used.

Smart contract example

chain A lock -> message/proof -> chain B mint

Every arrow in this flow is a trust boundary.

Cross-Chain Bridge in Auditing

Bridges often custody large amounts of value and depend on cross-chain assumptions that are hard to verify locally. A small validation bug can allow unauthorized minting or withdrawals.

Auditors review bridge code for message authenticity, replay protection, finality, signer thresholds, and accounting.

Red flags in code

  • Messages do not bind source chain, destination chain, contract, and nonce.

  • Validator threshold is too low or signer checks are weak.

  • Mint and burn accounting can diverge.

  • Failed relay states are not handled.

  • Chain IDs or domains are confused.

How to test or review it

  • Replay a valid message and expect failure.

  • Mutate source chain, destination chain, amount, recipient, and nonce.

  • Test signer threshold and proof verification.

  • Check pause and emergency recovery paths.

  • Review decimal conversion and wrapped-token accounting.

Bridge Exploit

A bridge exploit is an attack against bridge custody, message validation, validator signatures, minting logic, or replay protection.

Replay Attack

A replay attack reuses a valid transaction, signature, message, or proof in a context where it should only be valid once.

Chain ID

Chain ID is the blockchain network identifier used to separate transactions, signatures, and domains across chains.

Practice this in real audit scenarios

Definitions help, but auditors need reps. SCH turns concepts like Cross-Chain Bridge into exploit labs, code review habits, and report-writing practice.

Start the free trial or see the full smart contract auditing course.

Sources