Scroll has fixed a serious bug that could have let an attacker take money from its bridge. Scroll says no one used the bug. The incident also marks the first emergency fix the company has shi
Scroll has fixed a serious bug that could have let an attacker take money from its bridge.
Scroll says no one used the bug. The incident also marks the first emergency fix the company has shipped since it removed its independent Security Council.
Scroll has released an emergency fix for a bug that was found in a contract called ZkEvmVerifierPostFeynman. The contract checks the proofs that let Scroll post new states to Ethereum (ETH).
Scroll’s post-mortem on its governance forum says the contract built its call to OpenVM’s Halo2 verifier by hand and used the first four bytes of a user’s proof as the label for the call. OpenVM’s verifier has a function called verify with the label 0x24270d54. So, if a proof began with those four bytes, the call went to verify instead of the normal path.
That function took its values from places the attacker could control. An attacker could use this to pass off an old, real proof as proof for a new input. The result would be a fake state root and a fake withdraw root locked in on Ethereum.
Older versions were safe because their verifiers had no function selector, so every call went down the normal path.
The fixed contract now sends every call through one set entry point. This way, the contract sets the key details instead of the proof.
Scroll thanked the ethical hacker ZHOUCHUNGONG, who reported the bug on Nov. 3, one week before it published the fix.
Scroll says no one got a chance to exploit the flaw. An attack using the flawed contract would have needed either the permissioned prover role or “enforced batch mode.” That mode only opens after seven days pass with no finalization and that did not happen.
Scroll rechecked all 748 finalizations made while the flawed contract was still live, and it also replayed 233 past finalizations on a copy of Ethereum mainnet, and they all ended with the same roots.
In the past, outsiders helped oversee Scroll’s emergency fixes. For instance, in May 2025, Scroll pushed a fix to its FRI verifier and a verifier swap in February 2026 that were both approved by the Scroll Security Council. The council had 12 members, and 9 of them had to agree before any action.
The council was removed on June 1, 2026. A 3-of-4 admin multisig run by the Scroll team replaced it. Scroll lost its Stage 1 decentralization rating and is now listed at Stage 0. Notably, the multisig can upgrade core contracts, including the bridge, with no delay.
Scroll first proposed that the council be removed in April, saying that it cost more than it was worth. Some people on the forum disagreed and asked why Scroll did not just keep a smaller council. They also asked who would approve the network’s actions going forward.
A proposal was posted to the Scroll DAO forum on Nov. 4, 2026, that would make the chain a private, invite-only network built around AI if it ever gets approved. The proposal also states that the SCR token would also move back to Ethereum mainnet, where holders would use it to vote and stake.
Notably, by April this year, Scroll’s total value locked (TVL) had shrunk from around $600 million in 2024 to roughly $24.3 million. TVL is down to about $6.6 million as of this report.
The SCR token has also slid to about $0.018, recording a nearly 99% decline from its 2024 high.
The smartest crypto minds already read our newsletter. Want in? Join them.
