roninbridgealert

According to Odaily, blockchain security audit company Beosin Alert has detected abnormal cross-chain asset extraction behavior in the Ronin Bridge project. The Beosin security team analyzed that the root cause of this abnormal behavior lies in the project's failure to properly initialize the operator weight required for cross-chain transaction confirmation during contract upgrades. This oversight resulted in the minimumVoteWeight parameter in the contract being set to zero, allowing any signature to pass cross-chain verification. Currently, 3,996 ETH has been lost from the Ronin Bridge, with the funds stored at address 0xc6aec68dd6272efcbc74fb5308fe7f070437465e, which is identified as an MEV bot, suggesting it might be a white hat action. Beosin is currently collaborating with the project team to address this incident.