matt on Nostr: There was supposed to be a whitelist of withdraw addresses. Maybe it was also a break ...

There was supposed to be a whitelist of withdraw addresses. Maybe it was also a break in the range proof but there would have had to be a second bug. Seems more likely there was a software bug in the peg out verification more generally.