TechFlow News — According to a long-form tweet published by Paradigm security researcher samczsun, there was a flaw in the way Binance Bridge verifies proofs, which could potentially allow an attacker to forge arbitrary messages. The attacker somehow managed to convince Binance Bridge to send them 1,000,000 BNB—twice. The block height used by the attacker remained consistently the same—110217401—while legitimate withdrawals used much higher block heights, such as 270822321. Additionally, the attacker's proof was significantly shorter than those of legitimate withdrawals. These facts lead samczsun to believe that the attacker had found a way to forge proofs for that specific block.
Add to Favorites
Share to Social Media
