Nomad Bridge exploit transaction

An upgrade marked the zero root as trusted, so any unproven message passed; hundreds of copycats replayed this transaction.

Below is the attack transaction replayed on Ethereum: the decoded invocation flow (every call, event and revert), per-account balance changes, and the fund flow between the attacker and the protocol.