Squid's smart contracts are designed to never hold liquidity, they only orchestrate calls to DEXs, Axelar, and any other involved contracts. They do this, and deal with edge cases around cross-chain mechanics. This avoids security risks usually associated with token bridges.