Another bridge has collapsed. This time it's Taiko @taikoxyz

Today, Ethereum Layer-2 project Taiko paused its network due to a cross-chain bridge attack, approximately $1.7 million stolen, and the token dropped accordingly. The method was not complicated; the attacker forged withdrawal proofs, causing the system to mistakenly believe these withdrawals were legitimate, and thus released funds that shouldn't have been released.
The amount isn't large. What really makes me want to say something is the loophole in this kind of "forged withdrawal proof," which is the same type as the biggest cross-chain bridge hacks this year. I'll lay out the rules first. I am not accusing anyone, nor do I have evidence that the Taiko team has any malicious intent—being attacked once does not mean malicious intent. Before obtaining proof of the issue, I only state the on-chain facts and do not label any team.
This account has always been open to questioning without jumping to conclusions. But questioning is what I should do. My doubt is not about this one, but about a growing glaring phenomenon in the entire industry: cross-chain bridges, year after year, repeatedly drained by the same type of vulnerabilities. Flaws in verification logic, forged proofs, bypassed checks—these are not new types of attacks; they are old problems that have been vividly played out on others, repeatedly warned about.
Getting caught once is bad luck; when the entire track keeps falling into the same pit, isn’t that still a matter of "luck"? Every L2, every bridge, tells a similar story: security, inheriting Ethereum-level guarantees, safe to use. But once real money is involved, the way they fall is shockingly similar.
I don’t want to hear their standard post-incident statement: "We are investigating, user funds will be properly handled"—what I want to ask is, before users’ money goes in, why are those holes that should have been plugged long ago, holes others have already stepped over, still open? The stolen amount is $1.7 million, but what is repeatedly being consumed is the very question of "can cross-chain bridges be trusted." This is not an accidental account; it’s an old debt that the entire industry has yet to settle.