A wrapped token is a stand-in. It lives on one chain and represents a coin that lives somewhere else — or, in one common case, the same coin in a different format. Whether it is worth what it says depends on a single question the price chart never answers: who is holding the original, and what would stop them letting go of it?
Why wrapping exists at all
Blockchains do not read each other. An application on Ethereum cannot see a bitcoin balance, and a Solana program cannot move ether. If you want bitcoin to be usable as collateral inside an Ethereum lending app, something on Ethereum has to stand for it.
That something is a token issued under the host chain's standard — an ERC-20 on Ethereum, an SPL token on Solana — with a promise attached: one unit here corresponds to one unit of the original, locked away elsewhere. The promise is the whole product. The token contract itself only records balances; it has no way to know whether the bitcoin exists.
Three kinds of holder
Almost every wrapped asset falls into one of three arrangements. The names change every year; the arrangements do not.
| Contract on the same chain | Custodian | Cross-chain bridge | |
|---|---|---|---|
| Original sits | Inside the wrapping contract itself | In wallets controlled by a company or group of companies | Locked in a contract on the source chain, released on instructions from a validator set or proof system |
| Typical example | WETH | WBTC, exchange-issued pegged bitcoin | Tokens bridged from Ethereum to another network |
| You can unwrap | Yourself, any time, in one transaction | Usually only through approved institutions | Yourself, if the bridge is running and has the funds |
| Main failure | A bug in the contract | The custodian loses, freezes or misuses the reserve | The bridge is exploited and unbacked tokens are minted |
When a contract holds it: WETH
Wrapped ether is the least mysterious wrapped token and a good place to see the idea without the trust problems. Ether predates the ERC-20 standard, so ETH itself does not behave like other tokens inside applications. WETH fixes that: you send ETH to the WETH contract, it credits you the same amount of WETH, and when you call its withdraw function it burns the WETH and sends the ETH back.
Nobody else is involved. The ETH never leaves the contract, the balance is public on the chain, and
the contract cannot be paused by an operator. If you want to see how plain it is, open the contract on a
block explorer: the “Write Contract” tab lists deposit and withdraw,
and that is essentially the entire mechanism. The step people get stuck on is that withdraw takes the
amount in wei, the smallest unit, so one WETH is typed as a 1 followed by eighteen zeros.
The residual risk is the code. A contract this small and this heavily used is about as well-tested as anything on Ethereum gets, but “well-tested” is a judgement, not a guarantee.
Most wallets and exchanges unwrap WETH for you, which is why many holders never notice it exists — see the Ethereum record for how ETH itself is issued.
When a company holds it: WBTC and its successors
Bitcoin cannot be locked by an Ethereum contract, because Ethereum cannot see Bitcoin. So the original has to be held by someone, and the wrapped token becomes a claim on that someone.
Wrapped Bitcoin, launched in January 2019, is the long-running example. Its structure has three roles:
- Merchants are identity-verified institutions. They deliver bitcoin to the custodian and ask for WBTC to be minted, or return WBTC to be burned and get bitcoin back.
- The custodian holds the bitcoin and carries out the mint and burn on Ethereum.
- Everyone else buys and sells WBTC on the market. An ordinary holder does not redeem directly.
The bitcoin addresses holding the reserve are published, so the total can be compared against WBTC in circulation. That shows the bitcoin is there. It does not show who can move it, or what they would do under pressure.
That second question stopped being abstract in August 2024, when BitGo, WBTC's original custodian, announced that custody would move to a multi-jurisdiction arrangement involving BiT Global, a firm associated with TRON founder Justin Sun. The reserve did not change; the answer to “who holds it” did. Some large users reconsidered their exposure, and Coinbase, which had launched its own wrapped bitcoin, cbBTC, in September 2024, delisted WBTC that December. A lawsuit from BiT Global over the delisting was later dropped.
Nothing in that episode showed missing bitcoin. That is the point worth taking from it: a custodial wrapped token can be fully reserved and still be a different asset from one month to the next, because the thing you are trusting is the institution, and institutions change hands.
Exchange-issued pegged tokens follow the same pattern with one party playing every role: the exchange holds the coins, mints the token, and decides who may redeem. Simpler to understand; the entire claim rests on one balance sheet. Decentralised alternatives replace the single custodian with a rotating group of signers who must cooperate to move the bitcoin, which spreads the trust rather than removing it.
When a bridge holds it
Bridges are how most tokens reach a second chain. The usual design locks the original in a contract on the source chain and mints a representation on the destination chain when a set of validators, or a cryptographic proof, confirms the lock.
The weakness is that the destination token is only as good as the rule deciding when to mint it. If an attacker can convince the bridge a deposit happened when it did not, the bridge mints tokens with nothing locked behind them — and those tokens are indistinguishable from the real ones.
That is what happened to Wormhole in February 2022: a flaw let an attacker mint roughly 120,000 wrapped ETH on Solana without depositing anything. Jump Crypto, a backer of the project, replaced the missing ETH, so holders were made whole. Without that, the wrapped ETH on Solana would have been backed by less than the amount in circulation, and every holder would have shared the shortfall. A rescue is a decision someone makes, not a feature of the design.
Bridges have a quieter failure too. When a bridge shuts down, tokens left on the far side lose their route home. Ren's original network, which issued renBTC, was wound down after its backer Alameda Research collapsed in late 2022, and holders were told to bridge back before the shutdown.
Same ticker, different claim
This is where people actually lose money, and it is unglamorous.
USDC on Ethereum and a bridged “USDC” on another network can share a name and a logo while being different claims: one issued natively by the company, one issued by a bridge that holds native USDC. The same applies to ETH, BTC and most large assets that exist on several chains. Exchanges and wallets sometimes label these carefully (“USDC.e”, “Bridged”) and sometimes do not.
Our own rule for this archive is blunt: if we cannot name who holds the original, we treat the token as a separate asset with its own risk, not as the coin it is named after. Withdrawing a wrapped version to a chain where it is not supported, or sending it to an exchange that only credits the native version, is the most common practical mistake — the address and chain identifier helps with the first half of that check, and the layer 1 and layer 2 guide explains why the same coin appears on so many networks.
Checking a wrapped token you already have
- Find the contract address, not the name. Your wallet or the exchange's deposit page shows it. Two tokens with the same ticker and different addresses are different tokens.
- Look it up on the issuer's own site and confirm it is listed there. If the issuer does not list it, it was issued by someone else — usually a bridge.
- Classify the holder: contract, custodian or bridge.
- For a custodian, find the published reserve addresses and who can redeem. Note who the custodian is today, not who it was at launch.
- For a bridge, find out what approves a mint — how many validators, run by whom — and whether it has been exploited before.
- Ask how you would get out. If the answer is “sell it on a market”, your exit is liquidity, not the reserve, which is the same position most stablecoin holders are in, as the stablecoin guide sets out.
Primary references
- The WBTC project site for the merchant and custodian model and its reserve transparency pages.
- The WETH contract on Etherscan, where the deposit and withdraw functions can be read directly.
Structures described here were checked September 2026. The 2024 WBTC custody change, the 2024 cbBTC launch and WBTC delisting, and the 2022 Wormhole exploit are public record. Custodians, merchant lists and bridge validator sets change without much notice; read the issuer's current page before relying on any arrangement described in an article, including this one.