Lately, I've grown a bit tired of reviewing cross-chain bridge incidents... To put it simply, the risk of bridges isn't mainly in the "blockchain," but more in "people and mechanisms." Multi-signature sounds secure, but it really depends on who is signing, how the threshold is set, and how private keys are stored; oracles are more like the eyes of the price feeders—whether they are honest or not. The easiest thing to overlook is "waiting for confirmation": don't complain about it being slow, because the confirmation count is a buffer for reorganization/rollback. If you're in a rush to move to the next step, MEV grabbers and phishing scammers are not in a hurry.

Recently, hardware wallets have been out of stock, and phishing links are everywhere, which instead reminds me: don't do everything at once when doing cross-chain transfers. Start with small amounts, verify everything is correct before increasing; pay close attention to the target address and authorization scope in the signature pop-up—don't let "speed" dictate your actions. Take another look.