Analysis: $2B in crypto has been stolen from cross-chain bridges across 13 hacks in 2022 so far, accounting for 69% of total funds stolen
Following last night's exploit of the Nomad Bridge, Chainalysis estimates that $2 billion in cryptocurrency has been stolen from cross-chain bridges across 13 separate hacks so far this year.
Context & Ripple Effects
Cross-chain bridges were already flagged as crypto's weakest link before this summer: back in March, Chainalysis counted $1B+ stolen from bridge-related exploits across seven incidents over a little over a year, while Dune put more than $21B locked on Ethereum bridges alone. The near-total drain of the $190.7M Nomad token bridge — a startup backed by Coinbase and OpenSea — pushed the 2022 tally to $2B across 13 hacks, with bridges now accounting for 69% of all funds stolen.
The concentration is stark: if the year ends the way it is tracking, bridges will supply most of what makes 2022 the biggest hacking year on record, a milestone Chainalysis later confirmed at $3.8B stolen, mainly from DeFi protocols and North Korea-tied groups like Lazarus.
First-order effects
- Nomad's users are left holding claims against a bridge drained of nearly its entire $190.7M, and its institutional backers — Coinbase, OpenSea, and five other seed investors — wear the reputational hit.
- Every other bridge operator now faces an immediate run-risk: holders of the $21B+ parked on Ethereum bridges can exit at will, and each new exploit raises the odds they do.
Second-order effects
- Bridge teams are forced into a security arms race — more audits, bug bounties, and slower upgrade processes — raising operating costs just as theft-driven outflows shrink the fee base that funds them.
- Capital migrates toward bridges with the longest incident-free track records, concentrating liquidity on fewer platforms and making the survivors bigger, more tempting targets.
Third-order effects
- If bridges keep supplying the majority of stolen funds, cross-chain interoperability becomes gated by security design rather than speed-to-market, and regulators gain their clearest case study for treating bridge custody as systemic infrastructure rather than experimental DeFi.
The trend: As crypto's value concentrates in cross-chain infrastructure, bridges are becoming the industry's single largest attack surface — and their hack cadence is setting the pace for both user trust and regulatory attention.