PeckShield found that one of the @nomadxyz_ bridge exploiters is @RariCapital (Fuse Arbitrum) exploiter, who gained ~$3m in this exploit. https://t.co/Uxy66rXrJ1
The @nomadxyz_ bridge hack is made possible due to an improper initialization leading to the zero address (0x00) being marked as a trusted root, which led to every message being proven valid by default. (1 hack tx: https://t.co/M8ef8epCAo)