Cross-Chain Bridge Exploits Accounted for 50.1% of All Crypto Stolen in H1 2025, Totaling Over $1.5 Billion
financefinance0 views
Cross-chain bridges -- protocols that transfer assets between blockchains -- have become the single largest attack surface in crypto, with over $1.5 billion (50.1% of all stolen funds) laundered or stolen through bridge exploits in the first half of 2025 alone. Why it matters: bridges must hold massive reserves of locked assets on both source and destination chains, so they become high-value targets concentrating billions in TVL behind a small set of validator keys or smart contracts; so attackers who compromise even a minority of bridge validators (e.g., Orbit Chain's 7/10 multisig keys in January 2024, losing $81 million) gain full control of all locked funds; so stolen assets are immediately bridged across multiple chains, making recovery and tracing exponentially harder for law enforcement; so legitimate cross-chain users face persistent risk that any bridge they use could be the next $100M+ exploit; so the interoperability layer that is supposed to unify the multi-chain ecosystem instead introduces systemic fragility that undermines confidence in all chains simultaneously. The structural root cause is that bridge security models typically rely on multisig schemes with a small number of validators, lack standardized security auditing requirements, and concentrate enormous asset pools behind infrastructure that is orders of magnitude less battle-tested than the Layer 1 chains they connect.
Evidence
In H1 2025, hackers executed 119 attacks stealing $3 billion total, with 50.1% ($1.5B+) funneled through cross-chain bridges (The Block, Chainalysis). Orbit Chain lost $81 million in a cross-chain bridge exploit in January 2024 via compromise of 7 out of 10 multisig keys. ALEX bridge lost $4.3 million in May 2024 via private key compromise (CertiK). Force Bridge on Nervos Network lost $3 million in June 2025. Hacken's cumulative data shows over $2.8 billion stolen from bridges since 2022. Chainlink's cross-chain bridge vulnerability analysis identifies validator key compromise, smart contract bugs, and governance attacks as the three primary vectors.