A Bridge too Far

In October of 2022 an attacker made off with 600M (!!!) by finding a bug in a bridge contract connecting two of Binance’s blockchains. How did it happen? It’s time to blow the dust off your third year Data Structures textbook. Listen to us stumble our way through bridge contracts, relayers, Merkel trees, hashing, and cryptographic proofs.  This is Web3, and it's fantastic. If any of our former professors are out there, you might want to skip this one. You taught us well but it's been a few years. Links: Immunefi’s Hack Analysis: Binance Bridge, October 2022 How Did the BNB Chain Exploiter Pass IAVL Proof Verification? — An In-depth Analysis by Beosin The PR fix Twitter analysis thread