420 Bridge security

Verify network fingerprints, route direction, canonical asset representation and recipient. Treat copied symbols, unofficial wrapped tokens and arbitrary gateway addresses as unsafe.

Fail closed on suspended/deprecated routes, mismatched adapter IDs, stale/invalid proof configuration, exhausted risk limits, replay collisions, accounting-health failures or emergency halts.

Never provide private keys or source-wallet recovery secrets to bridge support.