Recently, someone asked again what cross-chain bridges are really afraid of. To put it simply, there are three main concerns: whether the multi-signature signers/entities are on the same boat, whether the data fed by oracles has been tampered with, and whether you're willing to patiently wait for confirmation after clicking "Cross." Many accidents are not due to advanced technology but because people are in a hurry: seeing no funds arrive, they click repeatedly, change parameters, grant permissions randomly, giving others room to exploit.

Lately, hardware wallets are out of stock again, and phishing links are everywhere. It feels like security awareness has increased, but so has anxiety. My approach is pretty simple: avoid crossing if possible; if you must, do it in small batches; and before confirming, don’t proceed to the next step. Anyway, taking it slow is better than crying all night after something goes wrong.