11 — Bridges e Interoperabilidade

Como mover value/messages entre chains. Hacks de bridge = maior categoria de loss em crypto. Modelos: lock-mint, burn-mint, atomic swap, IBC, restaking-based, intent-based.

1. Por que bridges?

Crypto fragmentado: BTC em Bitcoin, ETH em Ethereum, USDC em N chains, etc. Para usuário:

• Mover assets entre chains.
• Liquidity unified.
• Apps interoperáveis (DeFi composability cross-chain).

Bridges resolvem — mas com trust assumptions diversas e histórico de hacks catastrófico.

2. Modelos de bridge

Lock-and-Mint

Asset locked em chain A; "wrapped" version minted em chain B.

Chain A: lock 1 ETH em bridge contract
Chain B: mint 1 wETH (representing the locked ETH)
[reverse: burn wETH em B → unlock ETH em A]

Trust: bridge custodian honest + secure.

Burn-and-Mint

Native asset burned em chain A; minted em B. Used for canonical bridges (USDC CCTP, USDT recent).

Requires issuer (Circle, Tether) participation.

Liquidity pool / swap

Two-sided liquidity em ambas chains. User swaps em A; liquidity provider releases em B. Stargate (LayerZero) model.

Atomic swaps

HTLC-based. User and counter-party reveal H(x) = h; both legs settle. No bridge custody.

Limitações: requires counter-party in both chains; slow; UX terrível.

IBC (Inter-Blockchain Communication)

Native Cosmos. Light client of each chain runs em other chain → trustless via consensus proofs. Relayer pode ser anyone (no permission).

Optimistic bridges

Like optimistic rollups: assert + challenge window. Across, Connext.

ZK bridges

Validity proofs. Polyhedra, Succinct (formerly Telepathy), zkBridge.

Restaking-based

EigenLayer AVS provides decentralized validators for bridge. EigenLayer + bridge = pooled security.

3. Bridges principais

Wormhole

Multi-chain message protocol, originalmente Solana ↔ Ethereum.

• Guardian network: 19 entities sign messages.
• Supports 30+ chains.
• Hack fev/2022: US$ 320M minted via signature bypass bug. Jump Trading bailed out.
• Wormhole token (W) airdropped 2024.
• Native tokens: integrated with Circle CCTP, etc.

LayerZero

Bryan Pellegrino 2021. Ultra-light node model:

• Oracle (Chainlink originally) submits block header.
• Relayer (specific to app) submits proof of message.
• Both must agree → app accepts.

Adopted by: Stargate (own canonical product), thousands of dApps.

Concerns: oracle + relayer collusion = compromise. Configurable per-app.

ZRO token launched jun/2024.

Axelar (AXL)

Cosmos SDK chain that serves as cross-chain hub. Validators sign cross-chain messages. Lighter than running each chain's light client. Used by Squid Router, Lifi.

Chainlink CCIP (Cross-Chain Interoperability Protocol)

Chainlink's offering, 2023. Decentralized Oracle Network + Active Risk Management (anti-fraud). Enterprise positioning.

Stargate (LayerZero canonical)

Composable cross-chain liquidity. Use unified liquidity pools — não wrapped tokens. Top USDC/USDT cross-chain bridge.

Across

Risk Labs (UMA team). Optimistic bridge with relayers fronting capital. Cheapest ETH bridge for L1 ↔ L2. Across token (ACX).

Hyperlane

Modular interoperability. Permissionless deployment of cross-chain messaging entre any chains. ISMs (Interchain Security Modules) configurable.

Connext

Modular. Atomic swaps (CRT-style). Pivot to intent-based.

Synapse Protocol

Multi-chain bridge + AMM. SYN token.

Multichain (defunct)

Earlier formerly "AnyCallV7", Multichain network. Halted jul/2023 after CEO Zhaojun disappeared (arrested in China). US$ 130M+ stuck/lost.

Hop Protocol

L2 ↔ L2 specialist for Ethereum stack. HOP token.

Bitcoin bridges

• WBTC (BitGo custody) — biggest BTC representation em Ethereum. ~150k WBTC em circulation. Controversial 2024 management transition to Tron-aligned BiT Global.
• tBTC (Threshold Network) — decentralized.
• renBTC (defunct Ren Protocol).
• cbBTC (Coinbase, 2024) — new contender.

4. IBC (Inter-Blockchain Communication)

Cosmos native, RFC-style spec, native em todas Cosmos SDK chains.

How it works

1. Light client of chain A runs em chain B (and vice-versa).
2. State changes em A produce commitment proof.
3. Relayer (off-chain, anyone) submits proof to B.
4. Chain B verifies proof against A's light client → accepts.

Trustless: cryptographic verification, no third-party custody.

Apps

• ICS-20: Fungible token transfer.
• ICS-721: NFT transfer.
• ICS-27: Interchain accounts (control account em another chain).
• ICS-29: Fee middleware.
• ICS-32: NFT counterpart.

Adoption

100+ chains conectadas (Osmosis, Cosmos Hub, dYdX, Injective, Celestia, etc.). ~US$ 1B+ flowing monthly via IBC.

Limitations

• Only IBC-enabled chains.
• Ethereum mainnet not IBC-native (would need light client of Cosmos chain em Ethereum — gas-prohibitive). Bridges like Composable, Gravity Bridge attempt.

5. CCTP (Circle Cross-Chain Transfer Protocol)

Circle (USDC issuer), 2023. Native burn-and-mint for USDC.

• Burn USDC em chain A.
• Circle attests.
• Mint USDC em chain B.

No wrapped USDC (no USDC.e versions). Solves fragmentation problem.

Supported chains expanding: Ethereum, Arbitrum, Optimism, Base, Polygon, Avalanche, Solana (2025), Sui, Aptos.

Tether doing similar with native USDT migrations 2024-2025.

6. Native bridges (canonical for L2s)

L2 a Ethereum L1 = rollup bridge nativo.

Optimistic Rollup bridges

Deposit: instant (L1 → L2). Withdraw: 7-day challenge window (or use fast bridge like Across, paying premium).

ZK Rollup bridges

Deposit: instant. Withdraw: post-proof verification (~hours).

Liquidity bridges atop native

Across, Hop, Synapse let users skip 7-day window by paying liquidity provider fee.

7. Intent-based architectures

New paradigm 2024-2026: user states intent (e.g., "I want 1 ETH em Base"), solvers compete to execute. Cross-chain abstracted.

Examples

• Across V3 (intent settler).
• Anoma (intent-centric L1).
• Brink (intent infrastructure).
• Skip Protocol (Cosmos intent + interchain swaps).
• Bungee, Squid Router, LIfI: cross-chain swap aggregators with intent capabilities.
• CowSwap (intra-chain intent).
• dYdX Chain Abstraction initiatives.

User benefits: 1-click cross-chain, MEV protected, gasless options.

8. EigenLayer-based bridges

Decentralized validation via restaking:

• Omni Network: cross-rollup interop via EigenDA + EigenLayer.
• Hyperlane (optional restaking config).
• Lido CSM (Community Staking).

Trust assumption: 1/3 of restaked ETH validators must be honest.

9. Bridge hacks — categoria mais cara em crypto

Lazarus Group (N. Korean state APT) é attribu of vast majority of bridge hacks 2022-2025.

Why bridges are vulnerable

1. High-value honeypot: contains assets de duas chains.
2. Complex multi-chain logic: more attack surface.
3. Trust assumption vendido como "decentralized" mas frequently small validator set.
4. Signature verification bugs: state machine errors em complex flows.

Vitalik's view

2022 reddit post: "I think bridges are fundamentally limited compared to L2s..." Argued multichain world more vulnerable than rollup-centric.

10. Trusted vs trustless tradeoff

11. CCIP, Wormhole, LayerZero — comparison

12. Cross-chain TVL

Total locked em bridges (excluding canonical L2 bridges):

• ~US$ 30B em production bridges (mai/2026).
• WBTC alone ~US$ 10B equivalent.
• LayerZero ecosystem ~US$ 5B locked.
• Stargate ~US$ 1B.

Plus canonical L2 bridges: ~US$ 50B em ArbitrumOptimismBase/zkSync L1 bridges.

13. Best practices para usar bridges

✅ Use canonical bridges when possible (L2 official, CCTP, native IBC). ✅ Verify URL (phishing common). ✅ Approve only required amount (não infinite approval). ✅ Verify destination chain ID. ✅ Test with small amount first. ✅ Wait for confirmations recommended (~6 BTC, ~32 ETH blocks for finality). ❌ Don't use random new bridges without audit + bounty. ❌ Don't bridge highly volatile thin liquidity pairs.

14. Future trends

Native chain abstraction

User não pensa em "chains". Wallet + intents handle multi-chain seamlessly. NEAR pushing thesis hard.

Cross-rollup interop

Ethereum L2 ↔ L2 hoje requer bridge. Pushes for:

• Native rollup standard (EIP-7702, etc.).
• Shared sequencers (Espresso, Astria) → atomic cross-L2.
• OP Superchain (intra-OP-Stack).
• AggLayer (intra-Polygon-CDK).

PQC bridges

Bridge cryptography must migrate to PQC. Long-term assets at HNDL risk.

Unified liquidity

Stargate-style + CCTP-style: single canonical version of stablecoins across chains.

Restaking interop

EigenLayer AVS-based bridges multiplied 2024+ (e.g., Polyhedra, Omni).

15. WormholeLayerZeroAxelar code samples

Sending message via LayerZero (OFT — Omnichain Fungible Token)

contract MyOFT is OFT {
    function send(uint16 dstChainId, bytes memory to, uint256 amount) external payable {
        _send(msg.sender, dstChainId, to, amount, payable(msg.sender), address(0), bytes(""));
    }
}

IBC ICS-20 transfer (Cosmos)

msg := &types.MsgTransfer{
    SourcePort:    "transfer",
    SourceChannel: "channel-0",
    Token:         sdk.NewCoin("uatom", math.NewInt(1000000)),
    Sender:        senderAddr.String(),
    Receiver:      receiverAddr.String(),
    TimeoutHeight: clienttypes.NewHeight(0, 100),
}

16. Referência cruzada

• L1s connecting via bridges: 04-l1-bitcoin.md, 05-l1-ethereum.md, 06-l1-alt.md.
• L2 native bridges (rollup withdraw): 07-l2-scaling.md.
• Hacks detalhados: 14-incidentes.md.
• Restaking + EigenLayer: 07-l2-scaling.md §Restaking.
• IBC + Cosmos: 06-l1-alt.md §Cosmos.