1. Home
  2. Cross-chain Bridges

Cross-chain Bridges

Criminals more reliant on cross-chain bridges than ever after mixer crackdowns

The sanction of cryptocurrency mixer Tornado Cash in August caused the first major shift, but that is now accelerating even faster than projected.

Cybercriminals have accelerated their shift away from crypto mixers for cross-chain bridges over the past year, according to blockchain forensics firm Elliptic.

In June and July, nearly all of the crypto stolen was laundered through cross-chain bridges, Elliptic’s data shows a complete reversal from the first half of 2022.

In a Sept. 18 blog post, Elliptic explained the cross-chain crime trend is due to the “crime displacement” effect — where criminals move to a new method to carry out the illicit activity when the existing method gets over-policed. However, the shift to cross-chain bridges is rising ahead of their projections. 

Proportion of funds laundered between cryptocurrency mixers and cross-chain bridges between January 2022 and July 2023. Source: Elliptic.

Between July and September 2022, the ratio of laundered funds passing through mixers vs. cross-chain bridges flipped, corresponding to the U.S. Office of Foreign Asset Control’s sanctioning of Tornado Cash in August 2022, said the firm.

Elliptic said many cybercriminals, like the North Korean-backed Lazarus Group, flocked to the Avalanche bridge after the sanctions.

This same bridge was reportedly used recently by the Lazarus Group to facilitate some of the stolen funds in Stake’s $41 million exploit on Sept. 4, according to blockchain security firm CertiK.

Crypto mixers saw a small comeback between November 2022 and January 2023, due to the shutdown of RenBridge — which closed in December after its financer, Alameda Research collapsed from FTX’s bankruptcy.

Elliptic estimates that RenBridge facilitated $500 million in laundered funds throughout its operation.

However, shortly after, criminals have moved back to cross-chain bridges again, even more than before.

Related: 3 steps crypto investors can take to avoid hacks by the Lazarus Group

Elliptic said that criminals may be preferring cross-chain bridges as it is difficult for blockchain forensic firms to track illicit activity across chains in a scalable manner.

“Criminals are aware that legacy blockchain analytics solutions do not have the means to trace illicit blockchain activity across blockchains or tokens in a programmatic or scalable manner.”

In addition, many of these stolen tokens are only exchangeable through cross-chain bridges, while most of these DeFi services do not require identity verification to use, Elliptic explained.

The firm estimates that $4 billion in illicit or high-risk cryptocurrencies have been laundered through cross-chain bridges since 2020.

Magazine: $3.4B of Bitcoin in a popcorn tin — The Silk Road hacker’s story

German watchdog orders Worldcoin to delete non-compliant data

Forget about price! Polkadot Decoded 2023 says bear markets are for building

The mantra of this year’s Polkadot Decoded 2023 conference is to focus on building better products instead of worrying about token price.

The Polkadot Decoded 2023 conference just wrapped up and this year more than 100 speakers and 100 blockchain projects were in attendance. 

The beauty of crypto bear markets is they catalyze a realignment of perspectives and objectives.

All the hidden leverage is gone and most of the speculation is gone.

SBF is gone.

Do Kwon is gone.

Three Arrows Capital, Su Zhu, Kyle Davies and a handful of other hucksters and snake oil salesmen have been exiled.

And good riddance to all of them. Crypto doesn’t need hopium, messiahs, populists and dream peddlers. What we need are builders, fresh ideas, solutions that have product-to-market fit and some sort of realistic real world application.

That’s what I like about blockchain conferences. Especially during a bear market.

The buidl first mentality is the whole vibe of Polkadot Decoded. For the past two days, a tightly knit community of ecosystem siblings composed of developers, investors, ambassadors and a few curious journalists such as myself rendezvoused at the Øksnehallen conference center which is tucked away from the bustling, cobblestoned streets of central Copenhagen, Denmark.

Polkadot Decoded 2023 at the Øksnehallen conference center. Source: Cointelegraph

The location is almost poetic given that it is a surprisingly quiet spot that is discreetly nestled within a thriving city center, and that ethos carried on through the conference events where the focus has been:

  • Creating better interoperability between the projects in the Polkadot ecosystem;
  • Making the blockchain more welcoming to builders; and
  • Refining the cross-chain bridges that connect Polkadot to Ethereum, Cosmos and other blockchains.

Hardly anyone is talking about airdrops, token prices, memecoins, Bitcoin (BTC) hitting a new all-time high or any of the general conversational fodder that forms the bulk of most crypto discussions.

It’s bigger than a dollar sign

Rather than price, panellists discussed the challenges and occasional successes of helping TradFi and Web2 companies transition into Web3, the steps being taken to make the VC funding of projects more transparent, and the need for all the crypto jargon and rigamarole to be placed on the backend of DApps and the frontend UX to be more seamless.

Many folks even suggested that “blockchain,” “crypto,” and “Web3” should not be mentioned on projects’ websites, apps, roadmaps and so on.

According to Public Pressure CEO Giulia Maresca:

“I think it's not about talking about the technology because mass adoptees don’t know how the phone or Google maps or any technology is working. We need to create products that are really easy for the user, but given the benefit that they are built on Web3 tech. It should be really easy for the user; it shouldn’t be complicated. We shouldn’t talk about wallets, or bridging or doing complicated crypto things. People get scared the minute you start talking about wallets. It should be as easy as using Instagram.”

Speaking of Web3 and the need for crypto to have a better product-to-market fit and connection to real-world assets, I moderated the opening panel at Polkadot Decoded, which focused on on-chain entertainment within music and film. It was an intriguing conversation, given that the general consensus among creators and builders is that music and film will be the most sticky when it comes to user growth, retention and mass application of NFTs within everyday life.

Polkadot Decoded panel on music and film in Web3. Source: Cointelegraph

During the panel, Maresca explained why she believes that there is a natural synergy between creative industries and Web3 ideology:

“Web3 is a very socratic and creative space, and that aligns with the workflow and ideas of artists and creators.”

Maresca also firmly believes that phygital NFTs and experiences will gain a firm foothold in the areas of fashion design, the film industry and all aspects of the music industry.

Providing a real-world example of how fashion labels like Diesel were making entry to the Web3 space,, Maresca explained:

“Diesel would like to be more into Web3, so we’ve helped them to build a really strong concept using music at the center of their strategy, so Diesel acting like a discovery label, discovering emerging and breakthrough artists to give voice to their art. And they’ve done a few drops with us already which were really successful, but we’re planning a big drop at the beginning of September that is going to be a phygital drop. So, I think now a big part of the future is phygital; it is giving experience, utilities, what the community wants, which is to have a VIP experience. They want something from the brand, not only the garments. They want to be part of the Diesel family. It’s a long process and lots of education to the C-level, but there are a lot of opportunities for brands to work with the music community, to fans, and to new fans.”

Ed Hill, senior vice president of media services at Beatport, emphasised that rather than being a mere buzzword, Web3 needs to become a tangible and actionable ideology within the corporate structure of the entertainment industry.

When asked about the disconnect between consumer desires, creators’ objectives and the products and experiences currently provided by the entertainment industry, Hill said:

“That's a tough one to crack, but we have to go deeper and build better communities. If you look at YouTube and Facebook, those platforms are audience builders, and all anyone has cared about is views, and reach, and impressions and things like that. We have to go deeper into community building, and failure to do that is why younger audiences have been splitting away from traditional Web2 social media platforms, and I think, in time, if we build better, authentic communities from the ground up, that space between the corporate to creator to consumer gap begins to tighten.”

Related: New Web3 ID app lets users find each other based on proven interests

Community members are stakeholders, not just consumers

From my vantage point, and that of most conference attendees, crypto is about community, and the most viable projects tend to have a very grassroots approach where community members are stakeholders and their desires factor into the direction of the project. Historically, every time the crypto sector strays from this ethos and falls victim to the whimsy of money chasers and demagogues, investors and community members are essentially robbed of their agency within the project.

In order for corporations to transition into Web3 in an authentic way that bears fruit, creators, consumers and community members have to be viewed as more than a simple proletariat within a system purely focused on spinning up revenue and co-opting culture and turning creator IP into corporate marketing trinkets. Crypto media should take note too, but I digress.

Similar sentiments, which culminated with an optimistic take on the future of Web3, were expressed by Define Creative founder Finn Martin, who said:

“What gets me excited about Web3 is it offers all the tools and solutions to actually fix the problems that traditional Web2 has. By moving the assets on a chain, you can make it transparent for creators, you can give them direct revenue because, currently, the streaming model is broken. As a music creator, you own a fraction of a cent from each stream, and all of that can be addressed and solved via Web3.”

Blockchains should stop aspiring to be a jack of all trades

Polkadot Decoded 2023 main stage. Source: Cointelegraph

Generally, vast blockchain ecosystems tend to have a disjointed feel where a multiplicity of objectives and philosophies have investors and advocates feeling lost at sea. These projects tend to struggle with clearly defining their purpose, and this has a knock-on effect of impacting market fit efficacy.

They basically still struggle with the age-old crypto problem, which entails creating solutions for problems that aren’t actually problems for normal people. What stands out most to me at Polkadot Decoded 2023 is a unified goal of making the chain easier to use for builders, investors and users.

Regardless of whether the project is an AMM, DEX, lending market, blockchain-gaming startup, IPFS storage solution or a cross-chain bridge, each panel has made some reference to the need for composability, interoperability and turning the concept of Web3 from a thought to reality by building our infrastructure for projects to thrive on.

Which is why I again emphasize the importance of getting out from behind the screen and TradingView token price action charts and into fellowship with the community at conferences. No man is an island, and there’s value in finding a safe space to socialize, ideate, test and refine one’s investment thesis and views on the evolution of blockchains.

Hat tip to Polkadot Decoded for having the right narrative on lock this year.

This article is for general information purposes and is not intended to be and should not be taken as legal or investment advice. The views, thoughts, and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph.

German watchdog orders Worldcoin to delete non-compliant data

Blockchains need an interoperable standard to evolve, say crypto execs

Blockchains without interoperability are like computers without an internet connection — incapable of transferring data and value, a Chainlink Labs executive says.

Blockchain technology needs a benchmark communications standard that can be easily integrated by every network in order for a complete transition from Web2 to Web3 to occur, industry commentators say.

Many expect there will be multiple blockchains and such an ecosystem requires communication protocols similar to the Transmission Control Protocol/Internet Protocol (TCP/IP) used on the internet.

Ryan Lovell, director of capital markets at crypto price oracle solutions firm Chainlink Labs, told Cointelegraph that blockchains without interoperability are like what computers are without the internet — isolated machines thacannot transfer data and value across networks.

“To realize a fully interoperable blockchain ecosystem at scale, there needs to be an open communication standard analogous to the TCP/IP, which currently serves as the internet’s de facto connection protocol.”

Lovell believed a similar standard for blockchain networks would “pave the way for a seamless, internet-like experience” for the platform and their applications.

This is particularly important given that the last bull market saw a host of new layer-1 blockchains make their mark. However, nearly all of them operate in isolation from one another.

Lovell stressed that blockchain interoperability is “crucial” for financial institutions looking to tokenize real-world assets because that would ensure that liquidity isn’t “stifled” by only existing in a “siloed ecosystem.”

Brent Xu, the founder and chief executive of Umee — a lending platform backed by Cosmos’ Inter-blockchain Communication Protocol (IBC) — tolCointelegraph that before real-world assets are brought on-chain, proper risk management systems need to be put in place to facilitate this interoperability.

Xu explained that financial institutions would need to tick off Know Your Client (KYC) credentials to ensure the authenticity of the real-world assets before being tokenized on-chain and then make sure that they can be identified by an on-chain proof-of-reserve audit.

In order to avoid an on-chain catastrophe, he stressed the risk of cutting corners simply isn’t worth it:

“Think of the ‘08 mortgage crisis. Tremendous financial value was lost due to a broken legacy system. Imagine if this value was ported into the blockchain ecosystem, we would see tremendous value loss due to the contagion.”

Cross-chain bridges, independent layer-2 sidechains and oracles are three of the most commonly used blockchain interoperability solutions to date. The first two operate solely on-chain, while the latter feeds off-chain data on-chain.

Related: Why interoperability is the key to blockchain technology’s mass adoption

There have been issues with some of these solutions, however, most notably cross-chain bridges.

An October report highlighted that half of all exploits in decentralized finance (DeFi) took place on a cross-chain bridge, the most notable example being the $600 million Ronin bridge hack in March 2022.

Xu noted that many of these hacks have come from multi-signature security setups or proof-of-authority consensus mechanisms, which are considered to be centralized and much more vulnerable to attack.

He added that many of these interoperability solutions favored “speed of development” over security early on, which backfired.

The key, Xu said, is to incorporate interoperability within the platform, as that will result in a more secure end-to-end transaction than through the use of third-party bridges:

“Bridges are particularly susceptible because they provide two ends at which hackers can potentially infiltrate any vulnerabilities.”

Among the most commonly used blockchain interoperability protocols are Chainlink’s Cross-Chain Interoperability Protocol (CCIP); the IBC, which leverages the Cosmos ecosystem; Quant Network’s Overledger and Polkadot.

Magazine: ZK-rollups are ‘the endgame’ for scaling blockchains, Polygon Miden founder

German watchdog orders Worldcoin to delete non-compliant data

Decentralized Finance Protocols Flounder as Value Locked in Defi Shed More Than 25% Since FTX Collapsed

Decentralized Finance Protocols Flounder as Value Locked in Defi Shed More Than 25% Since FTX CollapsedOn December 12, 2022, the total value locked (TVL) in decentralized finance (defi) has been range bound after falling 25.5% from $55.94 billion on Nov. 5, to today’s $41.67 billion. Moreover, during the past 12 months, the TVL in defi dropped 82.56% from roughly $239 billion in Dec. 2021, to today’s aggregate. Smart Contract Token […]

German watchdog orders Worldcoin to delete non-compliant data

Illicit cross-chain transfers expected to grow to $10B: Here’s how to prevent them

Forecasts predict cryptocurrency criminals laundering more than $10 billion through cross-chain bridges by 2025, leading to calls for holistic screening solutions.

Improved blockchain analytics will become increasingly important to combat the use of cross-chain bridges for illicit means, which are estimated to surpass $10 billion in value by 2025.

Blockchain analytics firm Elliptic forecasts a 60% rise in the value of illicit cryptocurrency laundered through cross-chain bridges from $4.1 billion in June 2022 to $6.5 billion next year. This figure is projected to double midway through the decade.

Cross-chain crime has been a major talking point in 2022 with over $2 billion fleeced in hacks targeting cross-chain bridges. Aside from these bridges and their contracts being targeted, these bridges have also become an avenue for criminals to launder cryptocurrency. A prime example is an unknown hacker moving stolen funds from the now bankrupt FTX using cross-chain bridges.

Cointelegraph unpacked the findings of research released by Elliptic in correspondence with senior cryptocurrency threat analyst Arda Akartuna. 

The Elliptic analyst explained that billions of dollars in assets have been transferred between Bitcoin, Ethereum and other blockchains using bridge services such as Portal, cBridge and Synapse. Decentralized cross-chain bridges offer an unregulated alternative to exchanges for transferring value between blockchains.

Related: After FTX: Defi can go mainstream if it overcomes its flaws

While some bridges are used legitimately, Akartuna noted that the tools have emerged as a key facilitator in money laundering. ‘Chain-hopping’, or moving proceeds of crime between blockchains, has long been used to evade tracing efforts by exchanging cryptocurrency assets through decentralized or anonymous exchanges.

As blockchain surveillance, enforcement and regulatory efforts have improved, criminals have turned to cross-chains to continue laundering illicit funds:

“Decentralized cross-chain bridges provide unregulated alternatives that are being embraced by cybercriminals.”

Akartuna also notes that the sanctioning of cryptocurrency mixing service Tornado Cash has seen a shift in the way criminals launder money. Decentralized exchanges, cross-chain bridges and coin swap services are becoming a new means of moving illicit funds:

“Although the use of these platforms is overwhelmingly legitimate, they facilitate cross-chain money laundering and terrorist financing due to their lack of identity checks and anti-money laundering controls.”

An example of increased use of a cross-chain avenue for illicit means is RenBridge, which Elliptic research found to have laundered around $540 million of criminal proceeds as of August 2022. Meanwhile centralized exchanges, which also facilitate cross-chain or cross-asset swaps, are less popular for illicit actors given the push for AML and identity screening/KYC solutions.

The growing prevalence of cross-chain bridge usage for illicit means highlights the need for solutions or efforts to minimize criminal usage. Akartuna suggested users conduct due diligence on the services used to hop between blockchains and tokens and be wary of platforms associated with illicit activity.

Businesses should make use of blockchain analytics tools to screen addresses and transactions and set clear risk rules for their cryptocurrency usage. Nevertheless, there are some circumstances that simply cannot be predicted or avoided, as Akartuna explained:

“The sanctions against Tornado Cash is a prime example of how legitimate wallets may be inadvertently tainted due to sudden enforcement actions, as you now have 'pre-sanctions activity' which doesn't carry the same risk as post-sanctions activity.”

Existing single blockchain analytics solutions have done a lot to combat money laundering in the cryptocurrency space but fall short of capabilities to trace, screen or forensically investigate transactions across blockchains or tokens.

As the Elliptic threat analyst highlighted, once an asset 'hops' to a different blockchain, investigations become significantly more complex and resource intensive.

“The risk here is that a wallet can hold any number of different assets, and legacy blockchain solutions are not able to automatically trace the activities of the same entity across separate chains.”

Screening the movement of funds on separate blockchains may see some assets flagged as sanctioned while others may show no risk. In theory, this could lead to an exchange or wallet user unwittingly transacting with a sanctioned entity.

Elliptic, for example, makes use of a proprietary analytics tool with ‘holistic screening’ capabilities which merges existing blockchains into an interconnected system. This allows for visualization and screening across chains to better detect the movement of illicit funds.

German watchdog orders Worldcoin to delete non-compliant data

Value Locked in Defi at Its Lowest Point Since March 2021, Smart Contract Tokens Shed $22 Billion in 36 Days

Value Locked in Defi at Its Lowest Point Since March 2021, Smart Contract Tokens Shed  Billion in 36 DaysSmart contract platform tokens and decentralized finance (defi) protocols have taken a beating since the FTX collapse last week. The market capitalization of all the smart contract platform tokens in existence lost more than $22 billion during the last 36 days. The total value locked (TVL) in defi protocols has dropped to $43 billion, the […]

German watchdog orders Worldcoin to delete non-compliant data

State of Decentralized Finance Remains Lackluster, Value Locked in Defi Slid 67% in 6 Months

State of Decentralized Finance Remains Lackluster, Value Locked in Defi Slid 67% in 6 MonthsDuring the last 125 days or roughly four months, the total value locked (TVL) in decentralized finance (defi) has been range bound within the $50 billion to $65 billion region. The TVL in defi has shed significant value during the past six months as it dropped from $161 billion on April 1, down more than […]

German watchdog orders Worldcoin to delete non-compliant data

Report: Half of all DeFi exploits are cross-bridge hacks

Over $2.5 billion have been stolen from cross-chain bridges in the past two years.

According to a new report by crypto data aggregator Token Terminal, approximately 50% of exploits in decentralized finance, or DeFi, occur on cross-chain bridges. In two years' time, more than $2.5 billion have been stolen by hackers from exploiting vulnerabilities on cross-chain bridges. The amount is enormous comparison to other security breaches, such as DeFi lending hacks ($718 million) and decentralized exchange exploits ($362 million) in that period. 

Cross-chain bridges, which allow users to port digital assets from one chain to another, are known for their ability to solve multi-chain scaling issues. However, their complexity to build and subsequently audit, combined with massive amounts of funds locked in their smart contracts, has attracted much attention from hackers.

Security experts, such as Immunefi's CEO Michael Amador, explain that some developers in the DeFi space are simply lacking the necessary knowledge to build such complex mechanisms:

"Many developers launch projects by simply copying and pasting code from other projects. When one of these projects has a vulnerability, others usually have that vulnerability as well. Open source smart contracts, being visible and accessible to all, can easily attract blackhats who study them, discover where they're vulnerable, and exploit them."

It also appears that the vast majority of the cross-change exploits happened thus far took place on Ethereum Virtual Machine (EVM) blockchains. This includes this year's most serious incidents such as the Axie Infinity Ronin bridge hack, the Wormhole token bridge hack, and the Nomad bridge hack.

Meanwhile, cross-chain bridges based on the Cosmos Interblockchain Communications protocol (IBC), which has surpassed $1 billion in total value locked, have largely avoided the spearhead of the attacks. Although, last week, Cosmos co-founder Ethan Buchman said that a major security vulnerability was discovered on IBC after security audits. The exploit has been patched, and no funds were lost as a result of the incident. 

German watchdog orders Worldcoin to delete non-compliant data