One Real Deposit, Five Fake Exits: How Ankr's Bridge Let the Same Transaction Through
An attacker reused one small Optimism deposit to forge five withdrawal receipts and drain Ankr's Ethereum bridge. The mechanism is a lesson in why a valid signature is not proof an event happened, and why the pause flag stayed unset.