Scroll (@Scroll_ZKP): 3/ Issue 2: Bridge Message Spoofing
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
- ETH-70Negative
3/ Issue 2: Bridge Message Spoofing A separate bug (reported by @WhiteHatMage via @immunefi) could have allowed attackers to mint ETH or ERC20 tokens on Scroll by spoofing messages across L1 and L2. This vulnerability came from a change introduced during the Euclid upgrade.