The third time I fell into the trap of "cross-chain bridges look very smooth": the interface says waiting for confirmation, I used to think it was slow... now I think those four words are lifesaving. Multi-signature, simply put, is "several people jointly holding the keys," having more people doesn't necessarily mean it's safer; the key is whether it's the same group of people and the same communication chain. If something really goes wrong, being phished together can happen pretty quickly. Oracles are the same; if the price feed/status feed gets stuck for a moment, the bridge might start recording transactions chaotically, and what you see on your chain as "funds received" might just be an intermediate state. Anyway, I now prefer to wait a few more minutes, take an extra look at the signers/price sources, and keep the funds in the bridge at a level where "losing them wouldn't cause a catastrophe." By the way, I want to complain about the recent social mining and fan token schemes—"attention as mining"—it feels more like building an extra layer of bridge on top of the bridge... Watching the excitement, but all the risks are in the cracks.