Wanchain Cardano Cross-Chain Bridge Hit in Attack, About 515 Million NIGHT Stolen

BlockSec Phalcon said Wanchain's Cardano cross-chain bridge was attacked and about 515 million NIGHT were stolen. According to Foresight News, the preliminary investigation suggests the issue stems from a non-injective encoding problem in the TreasuryCheck validator's signed message handling. The signed message was created by concatenating 14 variable-length redeemer fields using an AppendByteString fold operation without separators or length prefixes. As a result, different field-value tuples could produce the same byte string, leading to identical hashes and allowing valid signature reuse.