Cross-Chain Bridge Risk Assessment: Tether Gold

Tether Gold (XAU-T) is a token that represents actual gold held by Tether Ltd. It is widely used on both Ethereum's main network and several Layer 2 solutions like Arbitrum, Optimism, and zkSync. As of September 2026, around $3.08 billion worth of XAU-T was locked across its core contract and extended to other blockchains via a combination of custodial lock-mint bridges and permissioned multi-sig vaults.

The bridge's architecture follows a hybrid approach. On Ethereum, users lock their XAU-T in a multi-sig Gnosis Safe known as the RootVault, then an off-chain relayer signs the proof and triggers a mint operation on the target Layer 2 network. For the reverse process, users burn XAU-T on the Layer 2 network; the L2 bridge emits a burn event, relayers submit a Merkle proof to the Release function of the RootVault, which then releases the underlying ERC-20 tokens.

However, this hybrid design introduces both operational risks and trust dependencies. Tether's custodial team operates a custodial bridge on non-EVM chains, using multi-sig vaults and trusted oracles to verify events on the source chain. Given the immense value locked in this bridge, it represents a prime target for malicious actors seeking to exploit its vulnerabilities.

The assessment identifies nine critical attack vectors, suggesting a high risk level (score of 8.3/10). The most severe issues involve re-entrancy vulnerabilities in mint and release functions, proof verification weaknesses, insufficient security measures in the RootVault's multi-sig setup, potential oracle manipulation for event finality, replay attacks across different Layer 2s, denial-of-service attacks on the relayer network, privileged function misuse, ERC20 permit misuse, and significant social engineering risks due to the custodial nature of the vaults.

Immediate remediation of these critical issues is strongly recommended, followed by a phased plan to strengthen the overall security posture of the Tether Gold bridge.