Recently, cross-chain bridges have been hacked again, and many people in the group started repeating "wait for confirmation"… Basically, this phrase means: I also don't know who to trust, so I'll just blame time for now.

When crossing a chain, don't be fooled by words like "IBC / message passing," the core is that you're trusting a series of components: the chain itself doesn't produce malicious blocks, the light client/validators mostly don't collude, the relayer isn't feeding false messages, the bridge contract isn't written to explode, plus the oracle/price feed doesn't suddenly malfunction (if it does, everyone waits for confirmation). The more steps involved, the more it resembles a DAO process: each step can hold you up.

I treat complexity as an enemy; if I can avoid crossing, I won't cross. If I really need to cross, I break it down and think: whose "honesty" is this money betting on? Anyway, don't expect magic.