Approximately 515 million NIGHT tokens stolen in Wanchain Cardano cross-chain bridge attack

Odaily Planet Daily News: Wanchain's Cardano cross-chain bridge was attacked, resulting in the theft of approximately 515 million NIGHT tokens from the bridge's treasury. Preliminary investigations indicate that the root cause is a non-injective signature message encoding issue in the TreasuryCheck validator. The signature message is constructed by directly concatenating 14 variable-length redemption fields without delimiters or length prefixes, allowing different combinations of field values to produce the same byte string, thereby reusing the same hash and valid signature.