Best coding practices for smart contract interoperability in enterprise blockchain development services

At EminenceTechnology USA, we’re building an enterprise blockchain platform that connects Hyperledger Fabric with Ethereum smart contracts for supply chain traceability.

We currently use a simple bridge like this for cross-chain event forwarding:

// Ethereum contract
pragma solidity ^0.8.0;

contract CrossChainBridge {
event DataSynced(string batchId, string dataHash);

function syncData(string memory batchId, string memory dataHash) public {
    emit DataSynced(batchId, dataHash);
}

}

And on the Fabric side, we’re using Node.js SDK to listen for the event and update our ledger:

contract.addContractListener('SyncListener', 'DataSynced', (event) => {
const details = event.payload.toString();
console.log("Received Sync Event:", details);
updateFabricLedger(details);
});

What’s the most secure and scalable way to code cross-chain data syncs like this? Should we use an oracle (like Chainlink) or build an interoperability layer ourselves?
Also, any suggestions to mitigate reentrancy or replay attacks in such setups?