Skip to content

BLOCKCHAIN LAB BRIEFING · SECURITY

The Bridge Is the Risk. The Exit Window Is the Design.

Moving an asset to another network replaces it with a representation controlled by a bridge. The original asset stays behind. The representation is only as good as the signers, the proofs and the time allowed for a halt.

2 October 2026

All briefings

01

What happened

Public reports of the February 2022 Wormhole incident showed a verification path failing and a wrapped asset minted without the deposit. Holders had a claim on a bridge that was undercollateralised. The underlying asset, where it existed, was on the origin network.

A rollup’s canonical bridge is narrower: escrow on the settlement layer, release against a proof or a challenge window. It is still a bridge. The window is the product.

02

Why it matters

Inventory a wrapped balance as exposure to the bridge, not as the underlying asset. Do not pay salaries in a wrapped asset you cannot redeem on a timetable you have tested.

A shorter exit is a choice to give watchers less time. There is no setting that deletes the tradeoff.

03

The operating layer

Note the bridge, the signers or the proof system, and the exit time on each balance. If the practical exit is a market, say so. If the bridge pauses, pause the balance in your product.

Do not auto-route a user across a third-party bridge to save a fee without showing the substitution.

04

What is verified

Wormhole’s public history includes the February 2022 incident. Rollup documentation describes exit windows. This page does not describe a method of attack.

05

What remains unclear

Whether a balance is the canonical bridge or a third-party wrap. The exit time a user will actually wait.

06

The catch

Each wrap is a substitution. It can be liquid and still not be the asset the user named. The interface should say what is held.

Not a safety rating of any bridge.

WATCH

What builders should watch

  1. 01Canonical or third-party, on the balance.
  2. 02Exit time, and who must watch during it.
  3. 03What your product does if the bridge halts.

BOTTOM LINE

Name the bridge and the exit. Do not label the wrapped balance as the original asset.

Sources

Blockchain Lab uses public social posts as reporting leads, not as proof. Every published briefing is assessed against primary sources, available documentation and relevant technical context. Social engagement is not used as evidence of the underlying claim.

Continue