Scroll patches mainnet validator flaw, says no exploitation was found

Ethereum layer-2 network Scroll (SCR) said through its official community that it fixed a vulnerability found in a bundle proof verifier deployed on mainnet and carried out an emergency upgrade on Nov. 11. If exploited, the flaw could have allowed a previously valid proof to be reused with new public inputs to finalize an arbitrary state root and withdrawal root. Scroll said no cases of exploitation were found during the period when the vulnerability existed, and its forced inclusion mode, an emergency mechanism, was not activated.