On July 21, 2026, Wanchain's Cardano-BNB Chain bridge was drained of ~515M NIGHT tokens. The TreasuryCheck validator concatenated 14 variable-length fields without separators, allowing a signature authorizing ~3,110 NIGHT to be reused for vastly larger redemptions.