Lock-and-Mint Vulnerabilities

Lock-and-Mint vulnerabilities refer to security flaws inherent in cross-chain bridge architectures where assets on a source chain are locked in a smart contract, triggering the minting of a representative wrapped asset on a destination chain. The vulnerability arises if the validation mechanism for the lock event is compromised, manipulated, or fails to verify the finality of the transaction on the source chain.

Attackers exploit these gaps to mint wrapped tokens without equivalent underlying collateral, effectively creating synthetic liquidity that can be drained from the destination chain. This undermines the pegging mechanism, leading to insolvency of the bridge and potential loss of user funds.

It is a critical issue in interoperability protocols, requiring robust multi-party computation or decentralized oracle networks to secure the state synchronization process. Addressing this requires rigorous smart contract audits and cryptographic proof verification.