Single-verifier bridge setups are fundamentally inadequate for securing cross-chain token transfers