So do you think the Liquid hack might have been a break in the range-proof or something like that? Or a non-cryptographic exploit like an RCE through a specially crafted transaction?
My guess is tha...
There was supposed to be a whitelist of withdraw addresses. Maybe it was also a break in the range proof but there would have had to be a second bug. Seems more likely there was a software bug in the peg out verification more generally.
1❤️1
