🚨 SlowMist TI Alert 🚨 💸 @ankr Loss: ~$304.5k 🔍 Root Cause: The attacker submitted five forged cross-chain receipts referencing the same legitimate Optimism transaction, altering the recipient, token, and withdrawal amounts. All five receipts carried valid signatures from the bridge's trusted consensus signer, allowing withdraw() to release assets without independently verifying the receipts against the actual source-chain events. ⚠️ The origin of the unauthorized signatures remains under investigation. Signer compromise has not been confirmed. 📌 Attacker (Tx Sender): 0x9A88Dd45AE846A979705c9cFdfD0f229e592D703 📌 Recipient: 0x119D250b82C1cf5345dF5912EFb4B1a4107a1Aa6 📌 Vulnerable Contract: 0xc437DF90B37C1dB6657339E31BfE54627f0e7181 Powered by http://SlowMist.AI Attack Tx: https://etherscan.io/tx/0x7310af5d53e08259915bc3547daf343d188b9c36db8dd6b3ff3b5e70565e88df https://etherscan.io/tx/0x90c563360cc343a640721662abe762e9ab9665aee0c22820b1656ff23bcfc891 https://etherscan.io/tx/0xde2d5b455c0071698fec9c23a9c50f9ecdfd8efa96b4fbb48ed0620bd4c29b5c https://etherscan.io/tx/0x91ba1a9c81a1bb67ce7a2779d5b2de54b7aece166f67d9e3a31e29e4e13c2886 https://etherscan.io/tx/0x46e20d4c8cd43dece94f7a2a890a348fefcb0dc8310279658c8f836e758bdad0 Reused Source Tx: https://optimistic.etherscan.io/tx/0x02e805b51beb4ed39e6a66ffcbdf9060cf008b3c3f0e827d0d357dfa115e7d4a