They can steal funds if: - permissioned validator majority signs an invalid withdrawal - permissioned finalizers refuse to finalize withdrawals They can freeze funds if: - permissioned validators stop processing withdrawals - permissioned lockers maliciously pause the bridge