Recently, I came across news of cross-chain bridges being hacked again, and my nerves about the "private key's vital importance" immediately tightened... To put it simply, when doing a cross-chain transfer, you're not just trusting "Chain A to Chain B" in a romantic sense; you have to trust a series of components: the finality of the chain that sends the message (whether it counts as a true confirmation), the intermediary people/modules (IBC is relatively more regulated, but you still need to consider whether the light client and relays are reliable), how the receiving chain verifies and executes. Plus, with oracles occasionally acting up, I truly understand the collective "waiting for confirmation" consensus: it's better to be slow than to hand your money over to a temporary worker. Anyway, before I do a cross-chain transfer, I compulsively double-check: who is signing, who is verifying.