Evaluating cross-chain bridge security

Bridge exploits have been a recurring theme in DeFi. When evaluating new protocols that rely heavily on cross-chain transfers, what are your key due diligence points for assessing bridge security beyond simple audits? Looking for practical, on-chain analysis techniques.