Scroll: The vulnerability in the proof verifier has been urgently upgraded and fixed, and the vulnerability has not been exploited

Scroll announced that it received a vulnerability bounty report on November 3, indicating that there was a vulnerability in the bundle proof validator deployed on the Ethereum mainnet, and it registered a fixed validator for batch version 10 on November 10. Scroll stated that it has confirmed that the vulnerability was not exploited on the mainnet.

According to the report, the vulnerability could allow old valid proofs to be accepted for new public inputs, thereby allowing the final confirmation of any state root and withdrawal root. Exploiting this vulnerability requires having a permissioned prover role or enabling the forced batch mode after 7 days without final confirmation.

Scroll stated that the forced mode was never enabled, and all 748 final confirmations during the period of the vulnerability used normal proofs, with previous versions of the validator unaffected.