Recently, I've seen more news about cross-chain bridges being hacked, and my attitude has immediately shifted to "wait for confirmation"... Honestly, executing a cross-chain transfer is not as simple as clicking a button. For things like IBC/message passing, on the surface, it's A sending a message and B receiving it, but in reality, you're trusting: whether the source chain has finality, whether the light client/validation logic has vulnerabilities, whether relayers might cheat or get stuck, whether the target chain's contract/module has secretly changed parameters (I really take screenshots of fee rates and archive them), plus when oracles go haywire, everyone just pretends to be dead until confirmation, which is even more absurd.

Now, before I do a cross-chain transfer, I first check the latest upgrade logs and parameter changes; if it's not clearly documented, I avoid making any moves. Which part do you care most about when doing cross-chain transfers? Or is it better to just not cross if you can avoid it?