In this process, the security of the derivatives minting and recovery is secured by the SLP open source code, and as long as there are no vulnerabilities in the code, there are no security risks. Cross-chain asset transfers are secured by XCMP, and if the SLP business involves non-Polkadot native assets (e.g. to release the liquidity of Staking ETH), cross-chain asset transfers will also use a bridge chain. As of this writing, no official bridge chain has been released, however, there are a number of audited third-party bridge chains for Bifrost to choose from.