Last night someone asked me again how to use cross-chain bridges most safely.

I said if you want safety, just use them less...
Bridges involve multi-signatures, oracles, and on top of that your phrase "I wait for confirmation before proceeding," missing any one of these easily leads to issues.
Multi-signatures are not safes, just "a few people sharing the blame";
oracles, let’s not even mention, feeding wrong data on-chain is all the chain will recognize.
As for "waiting for confirmation," honestly, it just means don’t gamble on whether the other side has truly received the funds or if there’s a rollback.

I once suffered a loss because I didn’t understand the bridge’s confirmation logic, thought it was slow, clicked to accelerate, and ended up stuck in the middle, with assets on both sides half-dead.
It took a whole night of messing around to recover, paying fees as tuition...
Since then, I have a rule: if you don’t understand it, don’t move it.
Better to miss out than to treat it as a lesson.

Recently, everyone’s been pushing testnet incentives, earning points, guessing whether the mainnet will issue tokens.
My advice: don’t use the most vulnerable bridges just for potential airdrops.
If something really goes wrong, your "expectation" won’t even cover the cost of fixing the mess.
Anyway, I now only cross with the minimum number of steps, avoid crossing if I can, and prioritize stop-loss discipline.