Bridge validation gaps that allow forged cross-chain imports to pass verification without matching source-side value represent a fundamental design flaw in bridge protocols.

"The attacker abused the bridge import process to produce unbacked Ethereum-side payouts. The May attacker exploited a validation gap that allowed a forged cross-chain import to pass verification even though the value committed on the source side did not match the payout released on Ethereum."