The third time reviewing the midnight cross-chain bridge incident, the more I look, the more I think that the words "wait for confirmation" are valuable. Multi-signature sounds very secure, but it really depends on whether the signers are the same group and whether they are offline and isolated; oracles are even more so, if the price feed is off, the bridge will release assets accordingly... I now prefer to be a bit slower, wait for several rounds of confirmation, monitor the status, and check delays, rather than rushing and putting assets into a black box. Recently, hardware wallets have been out of stock, phishing links are everywhere, everyone's security awareness has improved, but frankly, places like bridges should be considered inherently unsafe: start with small amounts, avoid clicking on unfamiliar links, and don't be rushed by "immediate arrival" prompts. That's all for now, I'm tired.