Cross-Chain Bridge Risk Assessment: Deribit

The report outlines the risk assessment of Deribit's cross-chain bridge, a critical component supporting the $3.9 billion TVL of the platform. The assessment identified several high-severity issues, with a total risk score of 7 out of 10, indicating a high-medium risk level.

The smart contract layer of the bridge contained three high-severity vulnerabilities. These included a re-entrancy issue in the L2-to-L1 withdrawal handler, an unchecked external call in the fee-distribution module, and an integer overflow in the capacity accounting mechanism. These vulnerabilities could lead to significant token theft, economic denial-of-service, and unlimited capacity over-commitment, respectively.

Cross-chain message verification also presented two high-severity weaknesses. The first was a weak Merkle-proof verification for Optimism roll-up messages, which could allow malicious relayers to submit fabricated proofs. The second issue was reliance on a single "Message-Relayer" oracle that could be censored or compromised, potentially allowing an attacker to censor withdrawals or inject false messages.

Governance and upgradeability presented two medium-severity weaknesses. The bridge used a single-owner ProxyAdmin with no timelock, and critical parameters like fee rates and capacity caps were not protected with a multi-sig. This setup could allow a compromised owner to pause the bridge at will, leading to operational disruption and potential ransom-like extortion.

Operational and infrastructure concerns ranked as low severity. The most significant issue was inadequate monitoring of the "Deribit Chain" validator set, which could expose the system to a potential 51% attack on the side-chain.

Overall, while the bridge functions adequately and has passed internal QA, the identified high-severity vulnerabilities and governance weaknesses pose a realistic pathway for a financially significant exploit.