[Scroll Fixes Ethereum Mainnet Proof Validator Vulnerability, Says Vulnerability Not Exploited] Odaily reports that Scroll received a bug bounty report on November 3rd indicating a vulnerability in its Bundle proof validator deployed on the Ethereum mainnet. A patched validator was registered for Batch Version 10 on November 10th. Scroll confirms that the vulnerability has not been exploited on the mainnet. The vulnerability could have allowed older valid proofs to be used with new public inputs, enabling attackers to finally confirm arbitrary state roots and withdrawal roots. Exploiting this vulnerability requires either a permissioned prover role or the forced batch mode enabled after seven consecutive days of no final confirmations. Scroll states that the forced mode was never enabled, and all 748 final confirmations during the vulnerability's existence were completed using normal proofs. Previous versions of the validator were unaffected.