🚨 SlowMist TI Alert 🚨 💸 @ankr Loss: ~$304.5k 🔍 Root Cause: The attacker submitted five forged cross-chain receipts referencing the same legitimate Optimism transaction, altering the recipient, token, and withdrawal amounts. All five receipts carried valid signatures from the bridge's trusted consensus signer, allowing withdraw() to release assets without independently verifying the receipts against the actual source-chain events. ⚠️ The origin of the unauthorized signatures remains under investigation. Signer compromise has not been confirmed. 📌 Attacker (Tx Sender): 0x9A88Dd45AE846A979705c9cFdfD0f229e592D703 📌 Recipient: 0x119D250b82C1cf5345dF5912EFb4B1a4107a1Aa6 📌 Vulnerable Contract: 0xc437DF90B37C1dB6657339E31BfE54627f0e7181 Powered by Attack Tx: Reused Source Tx: