4/ When leafCount==1 and leaves[0].leaf_index ==1, the root calculation skipped through leaves hash value, which actually includes request information, and just pushed the attacker submitted 'multiproof' value to the returned result. (CertiK Alert)