Beosin: Ronin Bridge has lost 3996 ETH

ChainCatcher message, according to monitoring by the blockchain security audit company Beosin Alert, the Ronin Bridge project has exhibited abnormal behavior in extracting cross-chain assets. According to the Beosin security team analysis, the root cause of this abnormal behavior lies in the project team's failure to properly initialize the operator weights required for cross-chain transaction confirmation when upgrading the contract, resulting in the minimumVoteWeight parameter in the contract being zero, allowing any signature to pass cross-chain verification.

Currently, the Ronin bridge has lost 3,996 ETH, with funds stored at an address starting with 0xc6a (this address is an MEV bot, so it is speculated that it may be a white hat action). Beosin is currently collaborating with the project team to address this incident.