As with all crypto technology, risk is real whether using a centralized or decentralized bridge. Some of the more novel decentralized bridges are relatively untested and even those that have been tested are still subject to exploits.
XLink is audited by CoinFabrik, covering both the contracts and the backends.
- https://cdn.alexlab.co/pdf/ALEX_Audit_bridge_coinfabrik_202212.pdf
- https://cdn.alexlab.co/pdf/ALEX_Audit_Bridge_2023-04.pdf
- https://cdn.alexlab.co/pdf/ALEX_Audit_202310_Bitcoin_Oracle_and_Bridge.pdf
The smart contracts are also subject to our bug bounty programme on Immunefi.