Introduction
You now know that Ethereum runs smart contracts, that Solana bets on speed and that L2s cut fees. But two questions remain that almost nobody asks, even though all of DeFi hinges on them: how does a smart contract know the price of an asset, when it can't browse the internet? And how do you move value from one blockchain to another, when they're incompatible with each other? The answers are called oracles and bridges. They're the backstage of Web3 — invisible when everything works, catastrophic when it breaks.
The problem: a blockchain can't see the world
A blockchain is deliberately a closed system: every node must be able to recompute exactly the same result as the others, or consensus collapses. The consequence: a smart contract can't “go and fetch” information from the internet. It only knows what's already written on its chain. The price of ETH in euros, the weather, the result of an election: all of it is invisible to it.
Yet DeFi needs that data constantly. A lending protocol must know whether the value of your collateral has dropped. A stablecoin must track the price of the euro or the dollar. Without reliable access to real-world prices, none of these services can work. This is what's called the oracle problem: how do you bring reality into a system designed to trust nothing from outside?
A court that rules only on the case file
A smart contract is like a court that can only rule on the evidence in the case file: it applies the rule to perfection, but it never steps outside to investigate. If nobody adds the right information to the file — or if someone slips in a false one — the ruling will be perfectly executed… and perfectly wrong.
Oracles: the blockchain's eyes
An oracle is a service that brings real-world data onto the blockchain: prices above all, but also sports results, weather data or exchange rates. The trap is that a single oracle recreates exactly the problem the blockchain set out to eliminate: a central point of failure. If it's wrong or if it lies, every smart contract that reads it is wrong along with it.
That's why serious oracles are themselves decentralized. Chainlink, the most widely used, aggregates data from dozens of independent sources and nodes: a majority of them would have to lie at the same time to skew a price. The lending protocols you came across in the Yield, staking & DeFi module rely on these price feeds to trigger liquidations at the right moment — no reliable oracles, no reliable DeFi.
DeFi is 100% “trustless”: there's no need to trust anyone.
Actually : Almost. The code runs without trust, but the data it consumes comes from oracles. One manipulated oracle — it has already happened on poorly protected protocols — and a protocol can be drained in minutes. Oracle quality is part of the DYOR criteria for any DeFi protocol.
A multi-chain world
Second blind spot: there isn't one blockchain, there are dozens. Bitcoin, Ethereum, Solana, and Ethereum's Layer 2s like Arbitrum, Optimism or Base (revisit the Ethereum in depth module if needed): each has its own rules, its own language, its own validators. And they can't talk to each other natively — your bitcoin only exists on the Bitcoin chain; it can't “go” to Ethereum.
Users, though, want to move around: enjoy an L2's lower fees, use an application that only exists on another chain, or bring their bitcoin's value into Ethereum's DeFi. So walkways had to be built between these isolated worlds. Those are bridges.
Bridges: moving value between chains
A bridge doesn't “teleport” your crypto: it locks it on one side and issues a receipt on the other. The most common mechanism is called lock and mint: your BTC are locked in a vault on the Bitcoin chain, and an equivalent token — WBTC, “wrapped bitcoin” — is created on Ethereum. That wrapped token tracks the BTC price and works in DeFi like any other token. When you want your real BTC back, the WBTC is destroyed and the vault unlocks.
Not all bridges are equal. “Trusted” bridges rely on a company or a small group that guards the vault: you are literally entrusting them with your funds. “Trustless” bridges replace the guardian with smart contracts — more aligned with the crypto ethos, but the code then becomes the weak point. Either way, remember the essential: your wrapped token's value depends entirely on the soundness of the vault guarding the original.
The cloakroom ticket
A wrapped token is a cloakroom ticket: you hand over your coat (your BTC), you're given a ticket (WBTC) that you can use, trade or lend. The ticket is worth one coat… as long as the cloakroom is well guarded. If the cloakroom gets burgled, all you're left with is a scrap of paper.
WBTC is bitcoin.
Actually : It's a claim on bitcoin locked in a vault. As long as the vault holds, the ticket is worth the original. But if the bridge is hacked or its guardian fails, the wrapped token can lose all its value — while the real BTC hasn't moved an inch.
Why bridges are hackers' number-one target
Think like an attacker: a bridge is a single vault concentrating enormous amounts of locked crypto, on which the value of every wrapped token in circulation depends. It's the perfect honeypot. The numbers speak for themselves: in 2022, the Wormhole bridge was robbed of the equivalent of 325 million dollars, and the bridge of the game Axie Infinity (Ronin) of more than 600 million — among the biggest hacks in crypto history, across all categories.
The flaws vary: a bug in the smart contract, compromised guardian keys, too few validators. You don't need to memorize the technical details — keep the logic: every time you use a bridge, you add a link of trust between you and your funds. And a chain is only as strong as its weakest link.
- Favor the official L2 bridges (Arbitrum's, Optimism's or Base's): they inherit Ethereum's security.
- Always test with a small amount before sending anything significant.
- Check the bridge's track record and audits (specialist sites like L2BEAT analyze these risks).
- Ask yourself whether you really need a bridge: going through a regulated exchange to switch chains is sometimes simpler and safer.
What it changes for you
If you buy and hold your crypto through Deblock, you never have to handle a bridge yourself: buying, holding and selling happen without you touching any of this plumbing. That's precisely the point of an integrated service — the complexity stays under the hood.
But the day you explore DeFi in self-custody (see the Self-custody & hardware wallets module), this knowledge becomes your safety belt: you'll know that a wrapped token isn't the original, that an oracle can be manipulated, and that a bridge is a vault that attracts burglars. Most of the users who lost big in bridge hacks didn't even know they were using a bridge.
Simplicity first, exploration later
With a Deblock account, you buy and hold your crypto within a regulated framework in France, without handling bridges or oracles. Build your base calmly — you'll explore the backstage of multi-chain when you're ready.
Open my Deblock accountWhat you should remember
- 01A smart contract can't browse the internet: oracles bring it real-world data, and all of DeFi depends on them.
- 02A serious oracle is itself decentralized (Chainlink aggregates dozens of sources): a single oracle would be a point of failure.
- 03A bridge locks your crypto on one side and issues a “wrapped” token on the other: it's a receipt, not the original.
- 04Bridges concentrate enormous sums: Wormhole ($325M) and Ronin ($600M+) rank among crypto's biggest hacks.
- 05Official L2 bridges, small test amounts, verified audits: caution isn't optional on this plumbing.
Ready to practice?
Open your Deblock account in minutes and apply what you have just learned.