Bridge-Wrapped Tokens Carry Hidden Custody Risks Most Crypto Users Overlook

When users hold wrapped tokens like ETH on Solana, they do not own the native asset but rather an IOU backed by collateral locked on the original chain by a third-party bridge. The security of that collateral depends entirely on the bridge's custody model, which ranges from cryptographic light-client verification to simple multisig committees or even single operators. Committee and centralized designs have historically been the most vulnerable, with several major crypto thefts requiring the compromise of only a handful of private keys. Critically, when a bridge is exploited — either by draining locked collateral or minting unbacked tokens — every holder of that wrapper suffers losses, even those who never interacted with the bridge. Users are advised to check a bridge's security model documentation before holding significant wrapped asset positions, as the ease or difficulty of finding that information is itself a risk indicator.