Portal bridge: how Wormhole moves tokens across chains
Portal bridge uses Wormhole’s wrapped-token flow: source assets are locked or burned, Guardians attest the transfer, and destination contracts release or mint tokens.
The Block Press Editors5 min read
Portal bridge moves tokens between chains through Wormhole’s Wrapped Token Transfers protocol, which locks or burns assets on the source chain and releases or mints tokens on the destination. The transfer is a sequence of on-chain actions linked by a signed message, not a single cross-chain transaction. That distinction matters: a confirmed source transaction can still be waiting for the destination chain to process the message.
How does a portal bridge transfer work?
A portal bridge transfer starts when the source chain’s Wormhole Token Bridge contract receives the token and emits a message describing the transfer. The contract locks a token native to that chain. If the token is already a Wormhole-wrapped asset, the contract burns it instead. The message identifies the token, amount, destination chain and recipient.
Wormhole Guardians observe the source-chain message and sign it after reaching a two-thirds supermajority. Their signatures form a Verifiable Action Approval, or VAA: a proof that records the cross-chain message and its approval. A destination-chain contract verifies the VAA before completing the transfer. It releases the original asset from escrow or mints the corresponding wrapped token.
For the transfer step, use portal bridge, a Wormhole-built token bridge app for moving tokens between Solana, Ethereum and other supported chains. Before submitting, confirm the source token, destination chain and recipient address. Where the chain requires it, authorize the token contract to transfer the amount; then submit the source transaction and wait for destination completion.
The destination asset may not be the same contract or token representation as the source asset. If a token has not previously been transferred to that destination, its metadata may first need to be attested so the destination contract can register and create a wrapped version. A ticker or token name alone does not establish that two assets are equivalent.
What token arrives on the destination chain?
The destination receives a token representation determined by the Wrapped Token Transfers model. For an original token, the source contract locks it and the destination contract mints a wrapped version. On a return transfer, that wrapped token is burned and the original is released from escrow. The wrap-and-release relationship depends on the bridge contracts and their accounting, not on the token names matching.
This is different from Native Token Transfers, Wormhole’s separate framework for moving an issuer’s token across chains without wrapping. Portal Bridge is documented as an interface for Wormhole’s wrapped-token protocol. Readers should therefore check which asset they are receiving and whether their destination application accepts that representation. A familiar symbol can refer to multiple contracts, and an asset bridged through one mechanism may not be interchangeable with a similarly named native token.
The lock-and-mint design also has a custody trade-off. For a native source asset, tokens sit in the bridge contract’s escrow while the wrapped supply exists elsewhere. The wrapped token depends on the bridge’s ability to verify messages and honor redemptions. Wormhole’s documentation says wrapped token contracts are managed through Wormhole Governance; token issuers do not have the same ownership and upgrade control that they can retain under NTT.
Why can a bridge transfer remain pending?
A source transaction and a completed destination transfer are separate events. After the source contract emits its message, Guardians must observe and attest it. The VAA must then be submitted to the destination contract, where it is verified and redeemed. Depending on the transfer path, a user or an execution service may submit that destination action. The exact chain and route determine the timing and steps.
Several failure points follow from that sequence:
- The source transaction may not reach the required finality, or a chain reorganization may change the event being attested.
- The VAA may be available while destination redemption has not yet been submitted or completed.
- A recipient address may be invalid for the destination chain or belong to a contract that cannot handle the token.
- The destination may lack the token’s registered wrapped representation, requiring an attestation before transfer completion.
When a transfer appears stuck, distinguish the source transaction from the destination redemption. The source transaction hash identifies the initiating event; the VAA and destination transaction show whether the message was attested and processed. Do not repeat the transfer simply because the destination balance has not updated: a second source transaction can create a separate transfer rather than complete the first.
What should users verify before bridging?
Check the token’s chain and contract identity, not only its displayed name. Confirm the destination network and recipient address before signing, and make sure the recipient can receive the token standard used there. Keep enough destination-chain gas available if the route requires a separate redemption transaction. A bridge can move the asset representation, but it cannot make an incompatible wallet or application accept it.
The practical choice is straightforward: use the wrapped-token route when the destination needs a Wormhole-wrapped representation and the exact token is supported on both chains. Treat source confirmation, Guardian attestation and destination redemption as distinct checkpoints. Confirmed here is the mechanism: Wormhole’s wrapped-token flow locks or burns on the source and verifies a signed message before release or minting on the destination. The specific route, timing and completion status of an individual transfer remain unverified until its transactions are checked on-chain.