Ronin Bridge Hack ($620M)

One week before the attack, Oracul detected abnormal validator node testing patterns. In parallel, we flagged transfer behavior involving wallets previously associated with Lazarus Group. 72 hours before the breach, a sharp deviation in validator node confirmation frequency was observed.