Recently, I saw a bunch of AI agent + automated trading accounts promoting "fully automated cross-chain," which sounds pretty cool, but my first reaction is: who holds the permissions? When it comes to cross-chain bridges, the risk is often not about "chain speed," but about multi-signature, oracles, and that disliked phrase "waiting for confirmation."

Multi-signature is not a cure-all; if the signers are chosen randomly or the threshold is too low, it's almost the same as single-point signing. Oracles are even worse—feed incorrect data, and no matter how many signatures you have, you'll just sign the wrong data together.

If at that time, our treasury's cross-chain didn't wait for two more confirmation rounds or set withdrawal limits tightly, it might have been taken away by an "automated script" long ago... Anyway, I now prefer to go slower, with fewer emotional reactions, and pay more attention to permission and delay settings.
Who's focusing on security, and who's just telling a story, is actually pretty obvious.