Bridges fail in one specific way: a pool of locked assets sits behind a validator set that is smaller and softer than the chains it connects. Compromise the validator set and the pool is gone. Wire's deposit design removes that target by never pooling assets behind a bridge validator set in the first place.
Step by step
1. The deposit stays home
To bring ETH into the system you deposit it into an escrow contract on Ethereum itself. The ETH does not move to a custodian or a multisig on another chain. It sits in a contract whose rules are visible on Ethereum, secured by Ethereum.
2. The deposit root proves it
Each deposit extends a hash chain: the new root is a hash of the previous root plus the new deposit's data. The latest root therefore commits to the entire deposit history. Rewriting any past deposit would change every subsequent root, which makes the proof chain tamper-evident. Wire consumes these roots to credit balances; it does not need to trust an oracle's opinion about what happened on Ethereum, it verifies the chain of hashes.
3. The shadowed balance spends on Wire
Against a proven deposit, Wire credits a shadowed balance: a representation backed one to one by the escrowed asset. Shadowed balances are what trade on Wire. A swap between two of them settles in one atomic transaction - both sides move or neither does. There is no pending state where one leg has executed and the other might not.
4. Withdraw anywhere
Burning a shadowed balance releases the corresponding native asset from escrow. Because every supported chain runs the same escrow pattern, the exit chain does not have to be the entry chain: deposit on one chain, trade on Wire, withdraw on another.
The honest trade-offs
- The escrow contract on each native chain is still code and code can have bugs. The claim is not "no contract risk"; it is "no third-party bridge validator set holding pooled assets". The security of each escrow rests on the chain it lives on.
- Deposit recognition is bounded by how long the native chain takes to settle. A deposit on a slow chain takes as long as that chain takes; Wire cannot make Ethereum settle faster.
See it from the user side: the InstaSwap guide trades two shadowed balances and reads the atomic receipt.