The first public blockchain, Bitcoin, was introduced in 2009. In the 14 years since there has been a Cambrian explosion of public blockchains with the number now totalling 201 according to DeFiLlama. While Ethereum has mostly dominated on-chain activity, accounting for ~96% Total Value Locked (TVL) in 2021; the last 2 years has seen that number fall to 59% as alternative layer 1 blockchains such as Binance Smart Chain (BSC) and Solana launched and layer 2 rollups such as Optimism, Arbitrum, zkSync Era, Starknet and Polygon zkEVM emerged amongst many others as scaling solutions for Ethereum.
According to DeFiLlama, as of writing, there are over 115 EVM based chains and 12 Ethereum rollup / L2s and the trend of activity on multiple chains is set to continue for various reasons:
We live in a multichain, multilayer world.
This proliferation of L1s, L2 and appchains has highlighted the importance of Interoperability - i.e. the ability and manner in which blockchains communicate with one another; to transfer assets, liquidity, messages and data between them.
Blockchain Interoperability can be broken down into three parts, as suggested by Connext:
Source: The Messaging Bridge Stack adapted from Connext
The benefit of being able to move assets and liquidity between chains is straightforward - it allows users to explore and transact in new blockchains and ecosystems. They will be able to leverage the benefits of new blockchains (e.g. trading or transacting on layer 2s that have lower fees) and discover new and lucrative opportunities (e.g. accessing DeFi protocols with higher yields on other chains).
The benefit of transporting messages lies in unlocking a whole set of cross-chain use-cases without having to move their original assets. Messages sent from Chain A (the source) trigger execution of code on Chain B (the destination). For example, a dapp on Chain A could pass a message about a user’s assets or history of transactions to Chain B which then allow them to engage in activities on Chain B without having to move any assets, e.g.
Despite the many benefits that Interoperability unlocks, it faces many technical challenges:
There are some Interoperability solutions that exist today to address some of these problems, so what is the current state of play?
Today cross-chain bridges are the main facilitator of cross-chain transactions. There are currently more than 110+ bridges with varying levels of functionality and tradeoffs across security, speed and how many blockchains it can support.
As outlined by LI.FI in their comprehensive Bridging 101 piece, there are several different bridge types:
These bridges are secured using different trust mechanisms underpinned by different trusted parties and incentives - and these choices matter (as pointed out by Jim from Catalyst Labs and the Li.Fi team):
Ultimately, trust mechanisms range from humans to humans with economic incentives to math-based verification. These approaches aren’t mutually exclusive - in some cases we’ve seen some being combined to enhance security - e.g. LayerZero’s game theory-based bridge incorporating Polyhedra (who rely on zk proofs for verification) as an oracle to its network.
How have bridges performed to date? So far, bridges have facilitated the transfer of a large amount of capital - in January 2022 TVL in bridges peaked at $60b. With this much capital at stake bridges have become prime targets for exploits and hacks. In 2022 alone $2.5b was lost through a combination of multi-sig key compromises and smart contract vulnerabilities. A 4% annual capital loss ratio is not tenable for a financial system to thrive and attract more users.
The attacks continued in 2023 with Multichain addresses being drained for $126m (representing 50% of the Fantom bridge and 80% of the Moonriver bridge holdings) accompanied with the revelation that all this time their CEO held control of all the keys of their ‘multisig’. In the weeks after this hack, TVL on Fantom (which had a lot of assets bridged across Multichain) dropped 67%.
At the end of the day, some of the largest bridge exploits and follow-on consequences have come down to multisig vulnerabilities (Ronin $624m, Multichain $126.3m, Harmony $100m) highlighting the importance of what bridge trust mechanisms are employed.
Having a small (Harmony) or grouped (Ronin) or singular (Multichain) validator set is a key reason for some of these exploits - but attacks can come from a frightening number of vectors. In April 2022, the FBI, Cybersecurity & Infrastructure Security Agency (CISA) and US Treasury Department issued a joint Cybersecurity Advisory Notice highlighting some of the tactics used by North Korean state-sponsored Lazarus Group. They ranged from social engineering, e-mail, Telegram and CEX account phishing among others (screenshot examples in this thread by Tayvano).
It’s clear that verification mechanisms that ultimately rely on humans are easy targets - yet the need for secure, efficient Interoperability remains. So where do we go next?
We’re now seeing the emergence of trust-minimized approaches to verification - and that’s what we’re excited about:
Both approaches center around trust-minimized verification to circumvent human reliance & fallibility and are flying the flag for the future of Interoperability. We’ll do a deep dive on them and the teams building in the space, stay tuned!
The first public blockchain, Bitcoin, was introduced in 2009. In the 14 years since there has been a Cambrian explosion of public blockchains with the number now totalling 201 according to DeFiLlama. While Ethereum has mostly dominated on-chain activity, accounting for ~96% Total Value Locked (TVL) in 2021; the last 2 years has seen that number fall to 59% as alternative layer 1 blockchains such as Binance Smart Chain (BSC) and Solana launched and layer 2 rollups such as Optimism, Arbitrum, zkSync Era, Starknet and Polygon zkEVM emerged amongst many others as scaling solutions for Ethereum.
According to DeFiLlama, as of writing, there are over 115 EVM based chains and 12 Ethereum rollup / L2s and the trend of activity on multiple chains is set to continue for various reasons:
We live in a multichain, multilayer world.
This proliferation of L1s, L2 and appchains has highlighted the importance of Interoperability - i.e. the ability and manner in which blockchains communicate with one another; to transfer assets, liquidity, messages and data between them.
Blockchain Interoperability can be broken down into three parts, as suggested by Connext:
Source: The Messaging Bridge Stack adapted from Connext
The benefit of being able to move assets and liquidity between chains is straightforward - it allows users to explore and transact in new blockchains and ecosystems. They will be able to leverage the benefits of new blockchains (e.g. trading or transacting on layer 2s that have lower fees) and discover new and lucrative opportunities (e.g. accessing DeFi protocols with higher yields on other chains).
The benefit of transporting messages lies in unlocking a whole set of cross-chain use-cases without having to move their original assets. Messages sent from Chain A (the source) trigger execution of code on Chain B (the destination). For example, a dapp on Chain A could pass a message about a user’s assets or history of transactions to Chain B which then allow them to engage in activities on Chain B without having to move any assets, e.g.
Despite the many benefits that Interoperability unlocks, it faces many technical challenges:
There are some Interoperability solutions that exist today to address some of these problems, so what is the current state of play?
Today cross-chain bridges are the main facilitator of cross-chain transactions. There are currently more than 110+ bridges with varying levels of functionality and tradeoffs across security, speed and how many blockchains it can support.
As outlined by LI.FI in their comprehensive Bridging 101 piece, there are several different bridge types:
These bridges are secured using different trust mechanisms underpinned by different trusted parties and incentives - and these choices matter (as pointed out by Jim from Catalyst Labs and the Li.Fi team):
Ultimately, trust mechanisms range from humans to humans with economic incentives to math-based verification. These approaches aren’t mutually exclusive - in some cases we’ve seen some being combined to enhance security - e.g. LayerZero’s game theory-based bridge incorporating Polyhedra (who rely on zk proofs for verification) as an oracle to its network.
How have bridges performed to date? So far, bridges have facilitated the transfer of a large amount of capital - in January 2022 TVL in bridges peaked at $60b. With this much capital at stake bridges have become prime targets for exploits and hacks. In 2022 alone $2.5b was lost through a combination of multi-sig key compromises and smart contract vulnerabilities. A 4% annual capital loss ratio is not tenable for a financial system to thrive and attract more users.
The attacks continued in 2023 with Multichain addresses being drained for $126m (representing 50% of the Fantom bridge and 80% of the Moonriver bridge holdings) accompanied with the revelation that all this time their CEO held control of all the keys of their ‘multisig’. In the weeks after this hack, TVL on Fantom (which had a lot of assets bridged across Multichain) dropped 67%.
At the end of the day, some of the largest bridge exploits and follow-on consequences have come down to multisig vulnerabilities (Ronin $624m, Multichain $126.3m, Harmony $100m) highlighting the importance of what bridge trust mechanisms are employed.
Having a small (Harmony) or grouped (Ronin) or singular (Multichain) validator set is a key reason for some of these exploits - but attacks can come from a frightening number of vectors. In April 2022, the FBI, Cybersecurity & Infrastructure Security Agency (CISA) and US Treasury Department issued a joint Cybersecurity Advisory Notice highlighting some of the tactics used by North Korean state-sponsored Lazarus Group. They ranged from social engineering, e-mail, Telegram and CEX account phishing among others (screenshot examples in this thread by Tayvano).
It’s clear that verification mechanisms that ultimately rely on humans are easy targets - yet the need for secure, efficient Interoperability remains. So where do we go next?
We’re now seeing the emergence of trust-minimized approaches to verification - and that’s what we’re excited about:
Both approaches center around trust-minimized verification to circumvent human reliance & fallibility and are flying the flag for the future of Interoperability. We’ll do a deep dive on them and the teams building in the space, stay tuned!