Optimism disclosed a critical vulnerability in its pre-Lagoon SDM verify path that allowed forged refund payloads to be accepted without recomputation. The issue was patched before reaching production on any chain and no funds were lost. This flaw affected refund verification logic, an area where small assumptions can turn into large losses. Public disclosure of such near-misses is viewed as a positive security practice for Layer 2 ecosystems.
Source: Read the original article
