{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T10:55:45Z","timestamp":1776077745072,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","funder":[{"name":"FCT","award":["UIDB\/50021\/2020"],"award-info":[{"award-number":["UIDB\/50021\/2020"]}]},{"name":"Blockchain.PT - Decentralize Portugal with Blockchain Agenda (Project no 51), WP 7: Interoperability","award":["C632734434-00467077"],"award-info":[{"award-number":["C632734434-00467077"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,12,15]]},"DOI":"10.1145\/3721462.3770781","type":"proceedings-article","created":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T19:56:49Z","timestamp":1765223809000},"page":"413-426","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["XChainWatcher: Identifying Anomalies in Cross-Chain Bridges"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7020-2087","authenticated-orcid":false,"given":"Andr\u00e9","family":"Augusto","sequence":"first","affiliation":[{"name":"INESC-ID & T\u00e9cnico Lisboa, Lisbon, Portugal"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4630-0688","authenticated-orcid":false,"given":"Rafael","family":"Belchior","sequence":"additional","affiliation":[{"name":"INESC-ID, T\u00e9cnico Lisboa & Blockdaemon, Lisbon, Portugal"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-1837-8592","authenticated-orcid":false,"given":"Jonas","family":"Pfannschmidt","sequence":"additional","affiliation":[{"name":"Blockdaemon, Dublin, Ireland"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0038-7199","authenticated-orcid":false,"given":"Andr\u00e9","family":"Vasconcelos","sequence":"additional","affiliation":[{"name":"INESC-ID, T\u00e9cnico Lisboa, Lisbon, Portugal"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7873-5531","authenticated-orcid":false,"given":"Miguel","family":"Correia","sequence":"additional","affiliation":[{"name":"INESC-ID, IST, ULisboa, Lisbon, Portugal"}]}],"member":"320","published-online":{"date-parts":[[2025,12,14]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2022. Multichain Contract Vulnerability Post Mortem | by Multichain (Previously Anyswap) | Medium. https:\/\/medium.com\/multichainorg\/multichain-contract-vulnerability-post-mortem-d37bfab237c8"},{"key":"e_1_3_2_1_2_1","unstructured":"2022. Rekt - Qubit Finance. https:\/\/rekt.news\/qubit-rekt\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2022. Rekt - Wormhole. https:\/\/rekt.news\/wormhole-rekt\/"},{"key":"e_1_3_2_1_4_1","unstructured":"2024. JSON-RPC API | ethereum.org. https:\/\/ethereum.org\/en\/developers\/docs\/apis\/json-rpc\/"},{"key":"e_1_3_2_1_5_1","unstructured":"Raja Amir. 2023. Etherscan Information Center | Understanding and Ethereum Transaction. https:\/\/info.etherscan.com\/understanding-an-ethereum-transaction\/"},{"key":"e_1_3_2_1_6_1","volume-title":"Mastering Ethereum: building smart contracts and dapps","author":"Antonopoulos Andreas M","unstructured":"Andreas M Antonopoulos and Gavin Wood. 2018. Mastering Ethereum: building smart contracts and dapps. O'Reilly Media."},{"key":"e_1_3_2_1_7_1","unstructured":"Multichain (Previously Anyswap). 2021. Anyswap Multichain Router V3 Exploit Statement. https:\/\/medium.com\/multichainorg\/anyswap-multichain-router-v3-exploit-statement-6833f1b7e6fb"},{"key":"e_1_3_2_1_8_1","volume-title":"SoK: Security and Privacy of Blockchain Interoperability. In 2024 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society","author":"Augusto A.","year":"2024","unstructured":"A. Augusto, R. Belchior, M. Correia, A. Vasconcelos, L. Zhang, and T. Hardjono. 2024. SoK: Security and Privacy of Blockchain Interoperability. In 2024 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society, Los Alamitos, CA, USA, 234\u2013234. 10.1109\/SP54263.2024.00182"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Rebecca Gurley Bace Peter Mell et al. 2001. Intrusion detection systems. (2001).","DOI":"10.1016\/S1361-3723(01)00614-5"},{"key":"e_1_3_2_1_10_1","unstructured":"Base. 2025. Base. https:\/\/base.org"},{"key":"e_1_3_2_1_11_1","volume-title":"Explained: The pNetwork Hack. https:\/\/www.halborn.com\/blog\/post\/explained-the-pnetwork-hack-september-2021","author":"Behnke Rob","year":"2021","unstructured":"Rob Behnke. 2021. Explained: The pNetwork Hack. https:\/\/www.halborn.com\/blog\/post\/explained-the-pnetwork-hack-september-2021"},{"key":"e_1_3_2_1_12_1","volume-title":"Explained: The THORChain Hack (July","author":"Behnke Rob","year":"2021","unstructured":"Rob Behnke. 2021. Explained: The THORChain Hack (July 2021). https:\/\/www.halborn.com\/blog\/post\/explained-the-thorchain-hack-july-2021"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3564532"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2023.3336246"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","first-page":"62","DOI":"10.1145\/3648607","article-title":"A brief history of blockchain interoperability","volume":"67","author":"Belchior Rafael","year":"2024","unstructured":"Rafael Belchior, Jan S\u00fc\u00dfenguth, Qi Feng, Thomas Hardjono, Andr\u00e9 Vasconcelos, and Miguel Correia. 2024. A brief history of blockchain interoperability. Commun. ACM 67, 10 (2024), 62\u201369.","journal-title":"Commun. ACM"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3471140"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.15394\/jdfsl.2008.1040"},{"key":"e_1_3_2_1_18_1","unstructured":"Tom Blackstone. 2023. LayerZero raises $120M to expand cross-chain messaging efforts. https:\/\/cointelegraph.com\/news\/layerzero-raises-120m-to-expand-cross-chain-messaging-efforts"},{"key":"e_1_3_2_1_19_1","unstructured":"Blockdaemon. 2024. Blockdaemon REST API. https:\/\/docs.blockdaemon.com\/reference\/introduction-txapi"},{"key":"e_1_3_2_1_20_1","unstructured":"Chainalysis. 2025. Chainalysis. https:\/\/www.chainalysis.com\/"},{"key":"e_1_3_2_1_21_1","volume-title":"ChainSwap Exploit","year":"2021","unstructured":"ChainSwap. 2021. ChainSwap Exploit 11 July 2021 Post-Mortem. https:\/\/chain-swap.medium.com\/chainswap-exploit-11-july-2021-post-mortem-6e4e346e5a32"},{"key":"e_1_3_2_1_22_1","unstructured":"Vishal Chawla. 2023. Union Labs raises $4 million to develop cross-chain bridge enabled by ZK proofs. https:\/\/www.theblock.co\/post\/263310\/union-labs-raises-4-million-to-develop-cross-chain-bridge-enabled-by-zk-proofs"},{"key":"e_1_3_2_1_23_1","unstructured":"James Cirrone. 2023. $225 Million Raised in Wormhole Token Sales. https:\/\/www.coindesk.com\/business\/2023\/11\/29\/blockchain-messaging-platform-wormhole-raises-225m-at-25b-valuation"},{"key":"e_1_3_2_1_24_1","unstructured":"James Cirrone. 2023. Crypto funding: A $72M week for cross-chain oracles NFT merchandise. https:\/\/blockworks.co\/news\/funding-cross-chain-oracle-nft-merchandise"},{"key":"e_1_3_2_1_25_1","first-page":"1643","article-title":"Attacks Against Cross-Chain Systems and Defense Approaches: A Contemporary Survey","volume":"10","author":"Duan Li","year":"2023","unstructured":"Li Duan, Yangyang Sun, Wei Ni, Weiping Ding, Jiqiang Liu, and Wei Wang. 2023. Attacks Against Cross-Chain Systems and Defense Approaches: A Contemporary Survey. IEEE\/CAA Journal of Automatica Sinica 10, 8 (2023), 1643\u20131663.","journal-title":"IEEE\/CAA Journal of Automatica Sinica"},{"key":"e_1_3_2_1_26_1","unstructured":"Ethereum Foundation. 2024. ERC-20 Token Standard. https:\/\/ethereum.org\/en\/developers\/docs\/standards\/tokens\/erc-20\/"},{"key":"e_1_3_2_1_27_1","unstructured":"Ethereum Foundation. 2024. ERC-721 Token Standard. https:\/\/ethereum.org\/en\/developers\/docs\/standards\/tokens\/erc-721\/"},{"key":"e_1_3_2_1_28_1","unstructured":"Ethereum Foundation. 2025. The Merge | Ethereum.org. https:\/\/ethereum.org\/en\/roadmap\/merge\/"},{"key":"e_1_3_2_1_29_1","unstructured":"Ethereum Foundation. 2025. Sidechains. https:\/\/ethereum.org\/en\/developers\/docs\/scaling\/sidechains\/"},{"key":"e_1_3_2_1_30_1","unstructured":"Arbitrum Foundation. 2025. Arbitrum \u2014 The Future of Ethereum. https:\/\/arbitrum.io\/"},{"key":"e_1_3_2_1_31_1","unstructured":"Eliza Gkritsi. 2021. $139M BXH Exchange Hack Was the Result of Leaked Admin Key. https:\/\/www.coindesk.com\/tech\/2021\/11\/01\/139m-bxh-exchange-hack-was-the-result-of-leaked-admin-key\/"},{"key":"e_1_3_2_1_32_1","unstructured":"Gnosis. 2025. Deposit Contracts | Gnosis Chain. https:\/\/docs.gnosischain.com\/about\/specs\/deposit-contracts"},{"key":"e_1_3_2_1_33_1","unstructured":"Gnosis. 2025. xDAI Bridge | Gnosis Chain. https:\/\/docs.gnosischain.com\/bridges\/About%20Token%20Bridges\/xdai-bridge"},{"key":"e_1_3_2_1_34_1","unstructured":"The go-ethereum Authors. 2025. Built-in tracers | go-ethereum. https:\/\/geth.ethereum.org\/docs\/developers\/evm-tracing\/built-in-tracers#call-tracer"},{"key":"e_1_3_2_1_35_1","volume-title":"Proceedings of the International Conference on Evaluation and Assessment in Software Engineering 2022 (EASE '22)","author":"Haugum Terje","year":"2022","unstructured":"Terje Haugum, Bj\u00f8rnar Hoff, Mohammed Alsadi, and Jingyue Li. 2022. Security and Privacy Challenges in Blockchain Interoperability - A Multivocal Literature Review. In Proceedings of the International Conference on Evaluation and Assessment in Software Engineering 2022 (EASE '22). Association for Computing Machinery, New York, NY, USA, 347\u2013356. 10.1145\/3530019.3531345"},{"key":"e_1_3_2_1_36_1","unstructured":"Hyperlane. 2025. Hyperlane. https:\/\/hyperlane.xyz\/"},{"key":"e_1_3_2_1_37_1","volume-title":"Computer Aided Verification: 28th International Conference, CAV 2016, Toronto, ON, Canada, July 17\u201323, 2016, Proceedings, Part II 28","author":"Jordan Herbert","year":"2016","unstructured":"Herbert Jordan, Bernhard Scholz, and Pavle Subotic. 2016. Souffl\u00e9: On synthesis of program analyzers. In Computer Aided Verification: 28th International Conference, CAV 2016, Toronto, ON, Canada, July 17\u201323, 2016, Proceedings, Part II 28. Springer, 422\u2013430."},{"key":"e_1_3_2_1_38_1","unstructured":"Polygon Labs. 2025. Mapped tokens - Polygon Knowledge Layer. https:\/\/docs.polygon.technology\/pos\/reference\/mapped-tokens\/"},{"key":"e_1_3_2_1_39_1","volume-title":"LayerZero Security Update -","author":"Labs LayerZero","year":"2022","unstructured":"LayerZero Labs. 2022. LayerZero Security Update - April 2022. https:\/\/medium.com\/layerzero-official\/layerzero-security-update-april-2022-4c27a22380b4"},{"key":"e_1_3_2_1_40_1","volume-title":"SoK: Not Quite Water Under the Bridge: Review of Cross-Chain Bridge Hacks. In 2023 IEEE International Conference on Blockchain and Cryptocurrency (ICBC). 1\u201314","author":"Lee Sung-Shine","year":"2023","unstructured":"Sung-Shine Lee, Alexandr Murashkin, Martin Derka, and Jan Gorzny. 2023. SoK: Not Quite Water Under the Bridge: Review of Cross-Chain Bridge Hacks. In 2023 IEEE International Conference on Blockchain and Cryptocurrency (ICBC). 1\u201314. 10.1109\/ICBC56567.2023.10174993"},{"key":"e_1_3_2_1_41_1","unstructured":"Li.Fi. 2024. LI.FI - Bridge & DEX Aggregation Protocol. https:\/\/li.fi\/"},{"key":"e_1_3_2_1_42_1","unstructured":"Mantle. [n. d.]. Mantle | Mass Adoption of Decentralized and Token-Governed Technologies. https:\/\/www.mantle.xyz"},{"key":"e_1_3_2_1_43_1","unstructured":"Poly Network. 2023. The Poly Network Exploit Analysis. https:\/\/polynetwork.medium.com\/the-poly-network-exploit-analysis-b0a77aff6078"},{"key":"e_1_3_2_1_44_1","unstructured":"Margaux Nijkerk. 2023. Coinbase Framework Venture Funds Invest $5M in Socket Protocol in Bet on Blockchain Interoperability. https:\/\/www.coindesk.com\/tech\/2023\/09\/06\/coinbase-framework-venture-funds-invest-5m-in-socket-protocol-in-bet-on-blockchain-interoperability\/"},{"key":"e_1_3_2_1_45_1","unstructured":"Nomad. 2022. https:\/\/github.com\/nomad-xyz\/hack-data\/blob\/main\/data\/hack\/transactions.json"},{"key":"e_1_3_2_1_46_1","unstructured":"Nomad. 2022. FAQ | Nomad Docs. https:\/\/docs.nomad.xyz\/token-bridge\/faq"},{"key":"e_1_3_2_1_47_1","unstructured":"Nomad. 2022. Glossary | Nomad Docs. https:\/\/docs.nomad.xyz\/resources\/glossary"},{"key":"e_1_3_2_1_48_1","unstructured":"Nomad. 2022. Introduction | Nomad Docs. https:\/\/docs.nomad.xyz\/nomad-101\/introduction"},{"key":"e_1_3_2_1_49_1","unstructured":"Optimism. 2025. Optimism. https:\/\/optimism.io\/"},{"key":"e_1_3_2_1_50_1","unstructured":"PeckShieldAlert. 2022. #PeckShieldAlert PeckShield has detected 41 addresses grabbed $152M (80%) in the nomadxyz_bridge exploit including 7 MEV Bots ($7.1M) RariCapital Arbitrum exploiter ($3.4M) and 6 White Hat ($8.2M). https:\/\/x.com\/PeckShieldAlert\/status\/1554350737957998592"},{"key":"e_1_3_2_1_51_1","unstructured":"Eli Phoenix. 2023. Supra Completes Over $24m in Early Stage Funding to Date. https:\/\/cointelegraph.com\/press-releases\/supra-completes-over-24m-in-early-stage-funding-to-date"},{"key":"e_1_3_2_1_52_1","unstructured":"Polygon. 2024. Polygon Knowledge Center. https:\/\/stargateprotocol.gitbook.io\/stargate\/v2-developer-docs\/integrate-with-stargate\/how-to-swap"},{"key":"e_1_3_2_1_53_1","unstructured":"Range. 2024. Range. https:\/\/www.range.org\/"},{"key":"e_1_3_2_1_54_1","unstructured":"Rekt. 2021. POLY NETWORK - REKT. https:\/\/rekt.news\/polynetwork-rekt\/"},{"key":"e_1_3_2_1_55_1","unstructured":"Rekt. 2021. THORChain - REKT 2. https:\/\/rekt.news\/thorchain-rekt2\/"},{"key":"e_1_3_2_1_56_1","unstructured":"Rekt. 2022. Nomad Bridge - REKT. https:\/\/rekt.news\/nomad-rekt\/"},{"key":"e_1_3_2_1_57_1","unstructured":"Rekt. 2022. Rekt - BNB Bridge. https:\/\/www.rekt.news\/bnb-bridge-rekt\/"},{"key":"e_1_3_2_1_58_1","unstructured":"Rekt. 2022. Rekt - Meter. https:\/\/rekt.news\/meter-rekt\/"},{"key":"e_1_3_2_1_59_1","unstructured":"Rekt. 2022. Ronin Network - REKT. https:\/\/rekt.news\/ronin-rekt\/"},{"key":"e_1_3_2_1_60_1","unstructured":"Rekt. 2023. Multichain - REKT 2. https:\/\/rekt.news\/multichain-rekt2\/"},{"key":"e_1_3_2_1_61_1","unstructured":"Rekt. 2023. POLY NETWORK - REKT 2. https:\/\/rekt.news\/poly-network-rekt2\/"},{"key":"e_1_3_2_1_62_1","unstructured":"Ronin. 2024. Earlier today we were notified by white-hats about a potential exploit on the Ronin bridge. After verifying the reports the bridge was paused approximately 40 minutes after the first on-chain action was spotted. https:\/\/x.com\/ronin_network\/status\/1820804772917588339"},{"key":"e_1_3_2_1_63_1","unstructured":"Ronin. 2024. Ronin Bridge | Ronin Docs. https:\/\/docs.roninchain.com\/apps\/ronin-bridge"},{"key":"e_1_3_2_1_64_1","unstructured":"Ronin. 2025. Withdraw an ERC20 token | Ronin Docs. https:\/\/docs.roninchain.com\/apps\/ronin-bridge\/withdraw-token#step-3-confirm-your-withdrawal"},{"key":"e_1_3_2_1_65_1","unstructured":"Squid. 2023. Squid raises $3.5 million to build next-generation cross-chain swaps powered by Axelar. https:\/\/medium.com\/@squidrouter\/squid-raises-3-5-million-to-build-next-generation-cross-chain-swaps-powered-by-axelar-c3284bf33b02"},{"key":"e_1_3_2_1_66_1","volume-title":"Benchmarking Blockchain Bridge Aggregators. In 2024 IEEE International Conference on Blockchain (Blockchain). IEEE Computer Society","author":"Subramanian S.","year":"2024","unstructured":"S. Subramanian, A. Augusto, R. Belchior, A. Vasconcelos, and M. Correia. 2024. Benchmarking Blockchain Bridge Aggregators. In 2024 IEEE International Conference on Blockchain (Blockchain). IEEE Computer Society, Los Alamitos, CA, USA, 37\u201345. 10.1109\/Blockchain62396.2024.00015"},{"key":"e_1_3_2_1_67_1","unstructured":"L2BEAT team. 2025. L2BEAT - The state of the layer two ecosystem. https:\/\/l2beat.com\/bridges\/summary"},{"key":"e_1_3_2_1_68_1","unstructured":"THORChain. 2021. ETH Parsing Error and Exploit. https:\/\/medium.com\/thorchain\/eth-parsing-error-and-exploit-3b343aa6466f"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2023.102892"},{"key":"e_1_3_2_1_70_1","volume-title":"Cryptocurrency-Backed Assets. In 2019 IEEE Symposium on Security and Privacy (SP). 193\u2013210","author":"Zamyatin Alexei","year":"2019","unstructured":"Alexei Zamyatin, Dominik Harz, Joshua Lind, Panayiotis Panayiotou, Arthur Gervais, and William Knottenbelt. 2019. XCLAIM: Trustless, Interoperable, Cryptocurrency-Backed Assets. In 2019 IEEE Symposium on Security and Privacy (SP). 193\u2013210. 10.1109\/SP.2019.00085"},{"key":"e_1_3_2_1_71_1","volume-title":"Proceedings of the 37th IEEE\/ACM International Conference on Automated Software Engineering (ASE '22)","author":"Zhang Jiashuo","year":"2023","unstructured":"Jiashuo Zhang, Jianbo Gao, Yue Li, Ziming Chen, Zhi Guan, and Zhong Chen. 2023. Xscope: Hunting for Cross-Chain Bridge Attacks. In Proceedings of the 37th IEEE\/ACM International Conference on Automated Software Engineering (ASE '22). Association for Computing Machinery, New York, NY, USA, Article 171, 4 pages. 10.1145\/3551349.3559520"},{"key":"e_1_3_2_1_72_1","volume-title":"Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses","author":"Zhang Mengya","year":"2024","unstructured":"Mengya Zhang, Xiaokuan Zhang, Yinqian Zhang, and Zhiqiang Lin. 2024. Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems. In Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses (Padua, Italy) (RAID '24). Association for Computing Machinery, New York, NY, USA, 298\u2013316. 10.1145\/3678890.3678894"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.22541\/au.169760541.13864334\/v1"}],"event":{"name":"MIDDLEWARE '25: 26th International Middleware Conference","location":"Vanderbilt University Nashville TN USA","acronym":"MIDDLEWARE '25","sponsor":["IFIP","Usenix"]},"container-title":["Proceedings of the 26th International Middleware Conference"],"original-title":[],"deposited":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T19:58:00Z","timestamp":1765223880000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3721462.3770781"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,14]]},"references-count":73,"alternative-id":["10.1145\/3721462.3770781","10.1145\/3721462"],"URL":"https:\/\/doi.org\/10.1145\/3721462.3770781","relation":{},"subject":[],"published":{"date-parts":[[2025,12,14]]},"assertion":[{"value":"2025-12-14","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}