This article belongs to a <\/em>series<\/em><\/a> analyzing monitoring and security analysis of cross-chain protocols.<\/em><\/p>\n Access the paper<\/strong> below\ud83d\udc47\ud83d\udc47\ud83d\udc47<\/p>\n XChainWatcher: Monitoring and Identifying Attacks in Cross-Chain Bridges<\/a><\/p>\n Photo by Francisco De Legarreta C.<\/a> on\u00a0Unsplash<\/a><\/p>\n Cross-chain bridges enable blockchains to communicate and transfer assets across different networks, addressing the fragmentation in DeFi and unlocking new use cases. This post breaks down how these bridges work, using the Ronin Bridge as an example.<\/strong> It covers the deposit and withdrawal processes, key components, and the role of Validators in relaying transactions. Understanding the mechanics behind cross-chain bridges is crucial for enhancing blockchain interoperability and building more connected decentralized applications (dApps).<\/p>\n Cross-chain bridges unlock the full potential of blockchains by enabling communication between different networks, addressing liquidity fragmentation in DeFi protocols, and supporting new use cases where multiple blockchains\u2019 features are crucial for a single\u00a0dApp.<\/p>\n Users may choose to transfer their tokens to other blockchains for various\u00a0reasons:<\/strong><\/p>\n taking advantage<\/strong> of unique properties such as lower transaction fees<\/strong> or faster processing speeds<\/strong>.seek access to other protocols<\/strong> available on alternative blockchainsensure consistency across the same protocol deployed in multiple blockchains<\/strong>, making them consistent governance-wise (i.e., decisions enforced in one blockchain are also propagated to the\u00a0other)<\/p>\n Unlike most DeFi applications that operate on a single chain, these dApps facilitate interoperability across two or more blockchains. Check the article below, where I explore the key reasons why cross-chain protocols are vital for the future of blockchain technology.<\/p>\n The Importance of Cross-Chain Protocols in Web3 [2024]<\/a><\/p>\n The figure below illustrates the components of a cross-chain bridge, showing a source chain (S in blue) and a target chain (T in green) with a one-way flow for token deposits. A deposit represents the transfer of tokens from a source blockchain (S) to a target blockchain (T). On the contrary, transferring tokens from the target blockchain (T) back to the source blockchain (S) is called a Withdrawal. In this figure, we abstract the architecture of the \u201cValidators\u201d\u200a\u2014\u200a<\/em>an off-chain component that relays data between networks (check our previous article discussing different architectures and their security guarantees<\/a>).<\/p>\n The flow of data through the components of a cross-chain bridge for the deposit of\u00a0tokens<\/p>\n The cross-chain process begins with the sender<\/em> issuing a Deposit transaction on S (1), where user funds are escrowed. The escrow is enforced by transferring tokens to a bridge contract (2). This triggers the emission of events by the respective token contract (3) and the bridge contract (4). Then, the Validators<\/em> issue the corresponding Deposit transaction on T (5). Depending on the inner mechanics of the bridge, the contract validates a set of signatures by validators (e.g., a multi-signature), or a cryptographic proof (e.g., a Merkle or Zero-Knowledge proof) in (6). If valid, this transaction triggers the unlocking or minting of tokens in T (7), generating events in each contract (8) and (9). The beneficiary<\/em> can then use these funds in the destination blockchain.<\/p>\n GIF\u200a\u2014\u200aA token bridge employing a lock-mint paradigm (the original tokens are kept locked in the source chain and the equivalent amount is minted in the destination). Note that the number of entities was simplified for demonstration purposes.<\/p>\n The process for withdrawing tokens is similar, though with some additional caveats. Usually, validators fetch the events from the target blockchain and generate signatures, but the users are the ones who issue the transaction to S to withdraw the tokens as a way to avoid increasing the operational cost of the protocol. This process is usually managed using the UI of each bridge. Below, there is the flow for the withdrawal of\u00a0tokens.<\/p>\n The flow of data through the components of a cross-chain bridge for the withdrawal of\u00a0tokens<\/p>\n [Note that there may be slight changes in the processes involving the validators (step 5 in both images) depending on the validator architecture and proving systems. Also, the emission of events in a Token Contract may not happen when dealing with native tokens (e.g., ETH in Ethereum)].<\/em><\/p>\n To analyze transactions of cross-chain bridges, we need to analyze transactions on multiple blockchains. Let me give you an example based on older data from the Ronin Bridge<\/strong>. The Ronin Bridge connects Ethereum (S) and the Ronin blockchain (T). To analyze an example of a cross-chain transaction, we will leverage the block explorers of both blockchains to decode the information.<\/p>\n The sender <\/em>issues a first deposit transaction<\/a> to the bridge contract in Ethereum. Let\u2019s take a look at the decoded input data for that transaction:<\/p>\n Function: depositERC20For(address _user, address _token, uint256 _amount)<\/p>\n Arguments: So, the above transaction was issued by the user (sender)<\/em> to the Ronin Bridge Contract, calling the depositERC20For<\/em> function. The data used in the function call instructs the bridge to transfer 5000 USDC to the Ronin blockchain. We can see that the transaction was successful. Let\u2019s also look at the execution logs<\/a>. We see that the first event was emitted by the token contract (0xa0b869<\/a>9\u2026\u200a\u2014\u200aUSDC), transferring the 5000 tokens to the bridge contract (0x1a2a1c<\/a>\u2026). Finally, there is a TokenDeposited<\/em> event emitted by the bridge contract with the following data:<\/p>\n _depositId: 1985750 From this moment onwards, the tokens have been transferred to the bridge contract on the source chain, and the off-chain entities are responsible for relaying information to the target chain. Around 3 minutes later, there is a transaction issued<\/a> in the Ronin blockchain by a Validator<\/em> depositing tokens to the beneficiary address with the following input\u00a0data:<\/p>\n Function: batchDepositERCTokenFor(uint256[],address[],address[],uint32[],uint256[])<\/p>\n Arguments: We can then again look at the execution logs<\/a> and check the events emitted by each contract. Again, we have an event emitted by the USDC token contract transferring tokens from the bridge contract (0xe35d62) to the beneficiary,<\/em> followed by an event emitted by the bridge contract. You may also check that the deposit IDs of the transactions on both chains\u00a0match.<\/p>\n The withdrawal of tokens follows roughly the same scheme but in the opposite direction. Consider a transaction<\/a> in the Ronin blockchain with the following input\u00a0data:<\/p>\n Function: withdrawERC20For(address,address,uint256)<\/p>\n Arguments: This transaction, issued by the sender,<\/em> instructs the bridge to withdraw 113 AXS to the beneficiary<\/em> in Ethereum. The off-chain Validators <\/em>listen <\/em>to the events emitted by the bridge contracts and generate digital signatures. A couple of minutes later, the user issues a transaction<\/a> on Ethereum to complete the withdrawal process. Based on the same logic for deposits, check the execution logs<\/a> and match the information on both chains. Note that the input data below for this transaction contains the signatures collected from Validators<\/em> according to the security mechanism used by the bridge. The set of signatures is verified within the bridge smart contract.<\/p>\n Function: withdrawERC20For(uint256 _withdrawalId, address _user, address _token, uint256 _amount, bytes _signatures)<\/p>\n _withdrawalId 1056606 Now that you\u2019ve grasped the foundational concepts of cross-chain bridges and how transactions are mapped across different blockchains, there\u2019s much more to explore. In the upcoming post<\/strong>, we\u2019ll dive deeper into the performance of cross-chain bridges and security vulnerabilities that have affected them in the past. Stay tuned for some fascinating insights!<\/p>\n A special thanks to <\/em>Rafael Belchior<\/em><\/a> for reviewing and making suggestions that improved this\u00a0post.<\/em><\/p>\n Additional relevant resources:<\/em><\/strong><\/p>\n What have we learned after 3.2 billion USD was stolen from cross-chain bridges?<\/a>Exploring Open Challenges and Future Research Avenues in Cross-Chain [2024]<\/a>https:\/\/medium.com\/media\/458abc358a707ec2e292e941416a5029\/href<\/a><\/p>\n Cross-Chain Bridges 101\u200a\u2014\u200aHow do tokens flow between blockchains?<\/a> was originally published in Coinmonks<\/a> on Medium, where people are continuing the conversation by highlighting and responding to this story.<\/p>","protected":false},"excerpt":{"rendered":" Cross-Chain Bridges 101\u200a\u2014\u200aHow do tokens flow between blockchains? This article belongs to a series analyzing monitoring and security analysis of cross-chain protocols. Access the paper below\ud83d\udc47\ud83d\udc47\ud83d\udc47 XChainWatcher: Monitoring and Identifying Attacks in Cross-Chain Bridges Photo by Francisco De Legarreta C. on\u00a0Unsplash TL;DR Cross-chain bridges enable blockchains to communicate and transfer assets across different networks, addressing […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-24166","post","type-post","status-publish","format-standard","hentry","category-interesting"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/24166"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24166"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/24166\/revisions"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}TL;DR<\/h3>\n
Why cross-chain bridges?<\/h3>\n
How do they\u00a0work?<\/h3>\n
Let\u2019s look at a real example (Ronin\u00a0Bridge)<\/h3>\n
Deposit of\u00a0Tokens<\/h4>\n
_user 0xd1a6f4c55C50d8d775D1007A1EcD2C263d7570A31
_token 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB482 (USDC)
_amount 5000000000 (5000 USDC because the USDC token uses six decimal places)<\/p>\n
_owner: 0xd1a6f4c55C50d8d775D1007A1EcD2C263d7570A3 (beneficiary)
_tokenAddress: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 (USDC)
_sidechainAddress: 0x0B7007c13325C48911F73A2daD5FA5dCBf808aDc (USDC in the Ronin blockchain)
_standard: 20 (ERC20)
_tokenNumber: 5000000000 (5000)<\/p>\n
_depositIds: 1985750
_owners: 0xd1a6f4c55C50d8d775D1007A1EcD2C263d7570A3 (beneficiary)
_tokens: 0x0B7007c13325C48911F73A2daD5FA5dCBf808aDc (USDC)
_standards: 20 (ERC20)
_tokenNumbers: 5000000000 (5000)<\/p>\nWithdrawal of\u00a0Tokens<\/h4>\n
_owner: 0x1391C4C4e845d0E5aE0f80d7072389B4D1d8B064 (beneficiary)
_token: 0x97a9107C1793BC407d6F527b77e7fff4D812bece (AXS in Ronin)
_amount: 113138226530558651754 (113.13 AXS — the AXS token uses sixteen decimal places)<\/p>\n
_user 0x1391C4C4e845d0E5aE0f80d7072389B4D1d8B064 (beneficiary)
_token 0xBB0E17EF65F82Ab018d8EDd776e8DD940327B28b (AXS in Ethereum)
_amount 113138226530558651754
_signatures 0x01c775e08ec07cdfe7151724ae9894080b369276……<\/p>\nWhat\u2019s Next?<\/h3>\n