Odaily News: Wanchain's Cardano cross-chain bridge was attacked, resulting in the theft of approximately 515 million NIGHT tokens from the bridge's treasury. Preliminary investigations indicate that the root cause lies in a non-injective signature message encoding issue within the TreasuryCheck validator. The signature message is constructed by naively concatenating 14 variable-length redemption fields without any separators or length prefixes, allowing different combinations of field values to produce identical byte strings, thereby reusing the same hash and valid signature.