Aster Bridge

This review reaches an adverse assessment based on two standing facts it could not verify around, not on a confirmed exploit. Aster Bridge moves collateral into Aster, a perpetuals exchange whose team CZ has publicly confirmed includes former Binance staff. This review found no named multisig, security council, or specific admin, pause, or upgrade authority for the bridge or core contracts, despite a direct search of Aster’s own documentation. That disclosure gap falls into the same category that led this registry to reject other bridges. More decisively, DefiLlama, the same data source this registry relies on for TVL figures throughout, has flagged Aster’s self-reported trading-volume data as unverifiable amid wash-trading concerns. A registry that trusts DefiLlama’s numbers elsewhere should not dismiss DefiLlama’s own credibility warning about this specific protocol.

Review triggers: events that reopen the verdict
• Aster Bridge’s admin, pause, and upgrade authority is publicly disclosed and mapped to named parties or a multisig with a published threshold
• DefiLlama or another independent data provider restores and sustains verified, non-flagged volume and TVL reporting for Aster for at least 90 consecutive days
• Token concentration among the top wallets materially declines from the reported greater-than-96%-in-six-wallets level, independently verified on-chain
• A proposed-size withdrawal is independently demonstrated to clear without delay under normal and stressed conditions

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-17.

The research file

Mechanism

A user connects a self-custody wallet on a supported chain, BNB Chain, Ethereum, Arbitrum, or Solana, and deposits collateral into Aster’s smart contracts. The contracts record the collateral against that wallet address for margin trading. Aster’s docs describe the platform as now running on its own L1. Aster calls itself non-custodial and says user funds stay under wallet control rather than with a central intermediary. It also says users need no approval to withdraw collateral. Ceffu, formerly Binance Custody, provides MPC-based custody only for the USDF stablecoin backing, separate from the trading engine. DefiLlama tracks Aster Bridge with several related Aster-family products, Aster asBNB, Aster asBTC, Aster USDF, and APX Bridge. This raises the same kind of double-counting question flagged elsewhere in this backlog, which this review did not resolve.

Control and governance

This review found no named multisig, security council, or specific admin, pause, or upgrade-key structure for the bridge or core contracts, despite checking Aster’s own documentation directly. YZi Labs, a venture vehicle associated with CZ that manages funds for early Binance executives, holds a minority stake. CZ says his own role is advisory only. The lack of any disclosed control structure is a real, unresolved gap, not merely an unfavorable one.

Incident record and data-integrity concerns

This review found no confirmed smart-contract exploit of Aster or Aster Bridge. The material concerns instead involve data integrity and concentration. DefiLlama briefly delisted Aster’s self-reported perpetuals volume data over unverifiable wash-trading concerns, and DefiLlama’s own head said the figures could not be verified. Reports say six wallets hold more than 96% of ASTER token supply. A CZ endorsement post caused a roughly 400% price spike, prompting insider-trading speculation that Aster’s CEO has denied. This review found no independent confirmation either way. In a separate competitive dispute, OKX’s founder called Aster a Binance-backed copy of Hyperliquid. That claim concerns reputation, not security, and appears here only for completeness.

Exit

Aster says withdrawals require no approval and users keep control of their keys throughout. On paper, this is a clearer exit account than those from several bridges already rejected in this registry. This review did not independently stress-test the claim. It found no confirmed report of withdrawal delay or failure, but it also found no third-party verification.

Comparison

Hyperliquid Bridge and Unit are both rejected in this registry for trust models that could not be verified or relied on too few parties. On paper, Aster’s stated non-custodial design and withdrawals without approval provide a clearer mechanism. But Aster presents a different unresolved risk: no disclosed admin or pause authority, self-reported volume data that this registry’s own trusted data source could not verify, and extreme token-holder concentration tied to a team facing active scrutiny over unconfirmed allegations of insider dealing.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• DefiLlama — Aster Bridge protocol record · secondary · accessed 2026-08-17
  Supports: tracked TVL, related product family
• Blockhead — Aster DEX surges past Hyperliquid as CZ confirms ex-Binance team · secondary · accessed 2026-08-17
  Supports: team background
• Bitcoin.com News — Binance founder CZ joins X Space to clarify Aster ties and advisory role · secondary · accessed 2026-08-17
  Supports: CZ advisory-role clarification
• Yahoo Finance — DefiLlama bombshell triggers over 10% crash for Aster price · secondary · accessed 2026-08-17
  Supports: DefiLlama data-verification concern
• LBank — Aster DEX under fire: DefiLlama delisting and wash-trading debate · secondary · accessed 2026-08-17
  Supports: wash-trading concerns, token concentration
• CryptoRank — OKX founder accuses Binance of launching copycat DEX Aster · secondary · accessed 2026-08-17
  Supports: competitive dispute

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.