{"id":"https://openalex.org/W7131137349","doi":"https://doi.org/10.48550/arxiv.2602.17805","title":"Exploiting Liquidity Exhaustion Attacks in Intent-Based Cross-Chain Bridges","display_name":"Exploiting Liquidity Exhaustion Attacks in Intent-Based Cross-Chain Bridges","publication_year":2026,"publication_date":"2026-02-19","ids":{"openalex":"https://openalex.org/W7131137349","doi":"https://doi.org/10.48550/arxiv.2602.17805"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.17805","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022808577","display_name":"Andr\u00e9 Augusto","orcid":"https://orcid.org/0000-0001-7020-2087"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Augusto, Andr\u00e9","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067908322","display_name":"Christof Ferreira Torres","orcid":"https://orcid.org/0000-0001-6992-703X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Torres, Christof Ferreira","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013539695","display_name":"Andr\u00e9 Vasconcelos","orcid":"https://orcid.org/0000-0003-0038-7199"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vasconcelos, Andr\u00e9","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5126637376","display_name":"Miguel Correia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Correia, Miguel","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5022808577"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.3483999967575073,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.3483999967575073,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.13259999454021454,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.10930000245571136,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/solver","display_name":"Solver","score":0.7197999954223633},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7168999910354614},{"id":"https://openalex.org/keywords/market-liquidity","display_name":"Market liquidity","score":0.5159000158309937},{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.4090999960899353},{"id":"https://openalex.org/keywords/parameterized-complexity","display_name":"Parameterized complexity","score":0.3837999999523163},{"id":"https://openalex.org/keywords/profit","display_name":"Profit (economics)","score":0.3792000114917755}],"concepts":[{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.7197999954223633},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7168999910354614},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6747999787330627},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5627999901771545},{"id":"https://openalex.org/C183582576","wikidata":"https://www.wikidata.org/wiki/Q184783","display_name":"Market liquidity","level":2,"score":0.5159000158309937},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.4090999960899353},{"id":"https://openalex.org/C165464430","wikidata":"https://www.wikidata.org/wiki/Q1570441","display_name":"Parameterized complexity","level":2,"score":0.3837999999523163},{"id":"https://openalex.org/C181622380","wikidata":"https://www.wikidata.org/wiki/Q26911","display_name":"Profit (economics)","level":2,"score":0.3792000114917755},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3066999912261963},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.28139999508857727},{"id":"https://openalex.org/C134121241","wikidata":"https://www.wikidata.org/wiki/Q899301","display_name":"Yield (engineering)","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.27639999985694885},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.27309998869895935},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.17805","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.17805","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.17805","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.17805","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Intent-based":[0],"cross-chain":[1,70],"bridges":[2],"have":[3],"emerged":[4],"as":[5,38,108],"an":[6,196],"alternative":[7],"to":[8,17,141,170,187,206,212,215,221],"traditional":[9],"interoperability":[10],"protocols":[11,86,102],"by":[12,22,210],"allowing":[13],"off-chain":[14],"entities":[15],"(\\emph{solvers})":[16],"immediately":[18],"fulfill":[19],"users'":[20],"orders":[21],"fronting":[23],"their":[24],"own":[25],"liquidity.":[26],"While":[27],"improving":[28],"user":[29],"experience,":[30],"this":[31,46],"approach":[32],"introduces":[33],"new":[34,51],"systemic":[35],"risks,":[36],"such":[37,107],"solver":[39,105,143,182],"liquidity":[40,222],"concentration":[41],"and":[42,59,80,90,145,181],"delayed":[43],"settlement.":[44],"In":[45,131],"paper,":[47],"we":[48,164,194],"propose":[49,195],"a":[50,60,120],"class":[52],"of":[53,76,124,128,178,185],"attacks":[54,129],"called":[55],"\\emph{liquidity":[56],"exhaustion":[57,223],"attacks}":[58],"replay-based":[61],"parameterized":[62],"attack":[63,117,198,208],"simulation":[64],"framework.":[65],"We":[66],"analyze":[67],"3.5":[68],"million":[69],"intents":[71,180],"that":[72,101,166,200],"moved":[73],"\\$9.24B":[74],"worth":[75],"tokens":[77],"between":[78],"June":[79],"November":[81],"2025":[82],"across":[83,173],"three":[84],"major":[85],"(Mayan":[87],"Swift,":[88],"Across,":[89],"deBridge),":[91],"spanning":[92],"nine":[93],"blockchains.":[94],"For":[95],"rational":[96],"attackers,":[97],"our":[98],"results":[99],"show":[100,165],"with":[103,126],"higher":[104],"profitability,":[106],"deBridge,":[109],"are":[110],"vulnerable":[111,157],"under":[112,158],"current":[113],"parameters:":[114],"210":[115],"historical":[116],"instances":[118],"yield":[119],"mean":[121],"net":[122],"profit":[123,183],"\\$286.14,":[125],"80.5\\%":[127],"profitable.":[130],"contrast,":[132],"Across":[133],"remains":[134],"robust":[135],"in":[136,203],"all":[137,174],"tested":[138],"configurations":[139],"due":[140],"low":[142],"margins":[144],"very":[146],"high":[147],"liquidity,":[148],"while":[149],"Mayan":[150],"Swift":[151],"is":[152,168],"generally":[153],"secure":[154],"but":[155],"becomes":[156],"stress-test":[159],"conditions.":[160],"Under":[161],"byzantine":[162],"attacks,":[163],"it":[167],"possible":[169],"suppress":[171],"availability":[172],"protocols,":[175],"causing":[176],"dozens":[177],"failed":[179],"losses":[184],"up":[186,211],"\\$978":[188],"roughly":[189],"every":[190],"16":[191],"minutes.":[192],"Finally,":[193],"optimized":[197],"strategy":[199],"exploits":[201],"patterns":[202],"the":[204,216,219],"data":[205],"reduce":[207],"costs":[209],"90.5\\%":[213],"compared":[214],"baseline,":[217],"lowering":[218],"barrier":[220],"attacks.":[224]},"counts_by_year":[],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2026-02-24T00:00:00"}