Lately I've been looking at cross-chain bridges again, and the more I look, the more I feel that "waiting for confirmation" isn't procrastination; it's a gamble on the system's uncertainty... Multi-signature looks stable, but the key is who is signing and whether they share the same risk control; oracles are even more so—if the data is skewed, the bridge will follow suit and mint/release tokens accordingly. Problems often aren't because hackers are smarter, but because everyone defaults to thinking "it should be fine."

Now I’ve actually scaled back my goals: if I can avoid crossing, I avoid crossing; if I must cross, I do it in batches, slowly, waiting for enough confirmations before acting. It’s not cool, but it can last longer.
By the way, the NFT royalty disputes are also quite similar: creators want income, secondary markets want liquidity—basically, everyone is fighting over "who bears the friction cost." The confirmation time on bridges is just the same kind of friction... Anyway, better to play it safe.