Signature verification flaw allowed forged withdrawal proofs.
Attacker wallets funded and staged ahead of the bridge exploit exploit against NovaBridge.
$124.5M drained from NovaBridge on Ethereum via Bridge Exploit.
CertiK flagged the anomalous transactions and published an initial alert.
NovaBridge paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
No funds recovered yet; tracing and negotiation continue.