BlockSec Phalcon said Wanchain's Cardano cross-chain bridge was attacked and about 515 million NIGHT were stolen. According to Foresight News, the preliminary investigation suggests the issue stems from a non-injective encoding problem in the TreasuryCheck validator's signed message handling.
The signed message was created by concatenating 14 variable-length redeemer fields using an AppendByteString fold operation without separators or length prefixes. As a result, different field-value tuples could produce the same byte string, leading to identical hashes and allowing valid signature reuse.
Wanchain Cardano Cross-Chain Bridge Hit in Attack, About 515 Million NIGHT Stolen
2026-07-21 06:23:39
Disclaimer:
1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.
2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.
Previous article：
UK Borrowing Exceeds Forecast in Early Fiscal YearNext article：
Abraxas Capital Withdraws 20,000 ETH From Aave
