Not fully off bridges

[Alkoc Liya]

Not fully off bridges but a lot more selective now. canonical bridges for major chains like official Arbitrum or Optimism bridge still feel fine. It's the third-party ones where almost every major exploit has happened, the ones routing through their own liquidity pools promising better rates or faster speeds.

For cross-chain swaps between different assets I use both mentioned depending on rates as there's no bridge contract in the middle. The one case where I still bridge manually: moving the same asset between chains, like USDC from mainnet to Base. aggregators tend to want you to swap into something in the process rather than just move it.

[slaman29]

I'm personally lucky, I don't like swapping crosschain or using bridges but I have to admit I do them every now and then and no problems.

But storing my BTC or locking it to 'wrap' it or whatever? Never. Too many exploits.

Bitcoin only. Maybe Ethereum (but these days my trust for them is lower than in 2020).

[hugeblack]

Unless the token is listed on those bridges, I see no reason to use them, as there are many centralized, no-KYC exchanges that offer lower fees and greater security. In short, the token itself determines which of these bridges is the best choice.

[logfiles]

But storing my BTC or locking it to 'wrap' it or whatever? Never. Too many exploits.

With the help of AI, hackers have found those bridges to be a jackpot for them. Notice how the hacks have increase so much in the recent times vs a couple of years back. There's some project I don't quite recall that even posted an announcement saying they were closing their service because they were receiving more than hundreds of hack attempts every day. The couldn't keep up with the pressure and just had to stop the whole service.

[Taskford]

I'm personally lucky, I don't like swapping crosschain or using bridges but I have to admit I do them every now and then and no problems.

But storing my BTC or locking it to 'wrap' it or whatever? Never. Too many exploits.

Bitcoin only. Maybe Ethereum (but these days my trust for them is lower than in 2020).

Seeing how so many exploits happening this days. That actually make me feel off using those options.

Especially for locking my funds in their platform. I'd rather choose those best alternatives rather than choosing what I think the more riskier option.

Unless the token is listed on those bridges, I see no reason to use them, as there are many centralized, no-KYC exchanges that offer lower fees and greater security. In short, the token itself determines which of these bridges is the best choice.

Better for those people to see those hacking issue as reminder for not trusting those platform.

But if they really look around, they provably could see some exchange offering no KYC on each swaps they made. I think they are much safer platforms compare on the option selected or chosen by OP.

[shinratensei_]

For cross-chain swaps between different assets I use both mentioned depending on rates as there's no bridge contract in the middle. The one case where I still bridge manually: moving the same asset between chains, like USDC from mainnet to Base. aggregators tend to want you to swap into something in the process rather than just move it.

Aggregators mostly use Cross-Chain Transfer Protocol (CCTP) by Circle if you're transferring USDC between supported chains, are you sure you're choosing the right routes?
If you want the best security, use CCTP for transfer of USDC between chain and swap on the biggest DEX yourself such as Uniswap. You basically don't interact with shady aggregator routes and your asset don't even touch 3rd party pool while bridging by doing that. Good solution for minimum slippage high security.

[slaman29]

But storing my BTC or locking it to 'wrap' it or whatever? Never. Too many exploits.

With the help of AI, hackers have found those bridges to be a jackpot for them. Notice how the hacks have increase so much in the recent times vs a couple of years back. There's some project I don't quite recall that even posted an announcement saying they were closing their service because they were receiving more than hundreds of hack attempts every day. The couldn't keep up with the pressure and just had to stop the whole service.

Not at all surprised. Even back in 2017 all these alt projects were hiring cheap devs and doing copycat scripts.

And also sleeper scripts were sold for years just hiding their loophole for years until enough money was in the system.

AI is now accelerating that. Truly bad situation.

[boyptc]

There's some project I don't quite recall that even posted an announcement saying they were closing their service because they were receiving more than hundreds of hack attempts every day. The couldn't keep up with the pressure and just had to stop the whole service.

Was it boltz?

A popular service and liked by the community until they have announced the attacks and then original founders have stepped down.

Seeing how so many exploits happening this days. That actually make me feel off using those options.

Especially for locking my funds in their platform. I'd rather choose those best alternatives rather than choosing what I think the more riskier option.

There have been issues even in the past with these locking of funds on these platforms. I have never used them when I have started to see those exploits and they didn't reduced but even more incidents when these hackers got more tools to help them.

[ObeyKnock]

Not fully off bridges but a lot more selective now. canonical bridges for major chains like official Arbitrum or Optimism bridge still feel fine. It's the third-party ones where almost every major exploit has happened, the ones routing through their own liquidity pools promising better rates or faster speeds.

Another thing to keep in mind is that L2Beat classifies USDC transferred via CCTP as being externally bridged rather than natively minted. While Circle is indeed the official issuer of USDC, CCTP is a different beast than an L2s' canonical bridge. This doesn't mean CCTP isn't safe, but it's nice to see that the term "official" actually has multiple categories.

Also, it's important to note that many official bridges are still upgradeable by a small multisig with no/little timelock. This is the same class of attack that occured with Ronin except it applies to bridge contracts instead of a sidechain's validator set. You can read more about this under each chain on L2Beat under their respective upgradability ratings.

TL;DR canonical = safe may not always be the case.

[logfiles]

Not at all surprised. Even back in 2017 all these alt projects were hiring cheap devs and doing copycat scripts.

And also sleeper scripts were sold for years just hiding their loophole for years until enough money was in the system.

AI is now accelerating that. Truly bad situation.

You are absolutely right. People just wanted quick money back then. No body would even bother to audit the scripts or smart contracts for the copycat projects and now it's time to reap

There's some project I don't quite recall that even posted an announcement saying they were closing their service because they were receiving more than hundreds of hack attempts every day. The couldn't keep up with the pressure and just had to stop the whole service.

Was it boltz?

yeah that one exactly. Thanks for reminding me. it was so sad that project mostly the ones that are open source have to even now close to avoid getting hacked and losing clients' money.

[sergiorus]

Not fully off bridges but a lot more selective now. canonical bridges for major chains like official Arbitrum or Optimism bridge still feel fine. It's the third-party ones where almost every major exploit has happened, the ones routing through their own liquidity pools promising better rates or faster speeds.

For cross-chain swaps between different assets I use both mentioned depending on rates as there's no bridge contract in the middle. The one case where I still bridge manually: moving the same asset between chains, like USDC from mainnet to Base. aggregators tend to want you to swap into something in the process rather than just move it.

Third party bridges are basically an obsolete tech now. The secure and liquid option is messaging protocols: Layerzero or CCTP by Circle.

From what I notices, even bridge aggregators mostly suggest them as primary routes nowadays.

[slaman29]

Not at all surprised. Even back in 2017 all these alt projects were hiring cheap devs and doing copycat scripts.

And also sleeper scripts were sold for years just hiding their loophole for years until enough money was in the system.

AI is now accelerating that. Truly bad situation.

You are absolutely right. People just wanted quick money back then. No body would even bother to audit the scripts or smart contracts for the copycat projects and now it's time to reap

Hehe, trust me, they still do. They've just moved on to other things. Show some people here 5% annual interest starting rate on some staking DEX for stablecoin today and you'll get enough bites.

Raise it a little every month, show people millions are staked, then all the greedy people jump on. Audits? Checks? lol these are zero importance to them.

[Odogwu-Blockchain]

I've never used bridges to cross chains before because I don't need the service for my crypto activities, if there is anything that will let me need it, then I'll try to use the cross chains features.

I've always feel like many charges will be incurred on my transaction to move tokens from one chains to another, then why not do that on centralized exchange and get token in another chains with lees fee, what's I do tell myself.

Can't tell what aggregators are good or not, I haven't interacted in their blockchain network.