SlowMist: All five forged receipts in the Ankr cross-chain bridge attack carry valid signatures.
Nov 9, 17:19
November 9th, blockchain security firm SlowMist reported that the Ankr cross-chain bridge attack resulted in approximately $304,500 in losses. The attacker referenced the same legitimate Optimism transaction and submitted five forged cross-chain receipts, altering the recipient, token, and withdrawal amount. All five receipts carried valid signatures from the cross-chain bridge's trusted consensus signers, and the withdrawal function released assets without independently verifying the actual events on the source chain. The source of the unauthorized signatures is still under investigation, and it has not been confirmed that the signers were compromised.