Uninitialized Memory Use in Linux Kernel ip6_tunnel VLAN Decapsulation

This repository is a small proof-of-concept for CVE-2026-23003, a cross-chain bridge message forgery/replay vulnerability. It contains 4 files: a vulnerable Solidity contract (Bridge.sol), a minimal Python demonstration script (exploit_bridge_forge.py), a README explaining the issue and attack flow, and a license file. The core issue is in Bridge.sol: withdraw() calls verifyProof(proof, from, to, amount, chainId) but does not enforce that the proof is bound to the true source chain, and the simplified verifier always returns true in this demo. As a result, a deposit event/proof from one chain can be replayed on another chain to trigger unauthorized transfers. The exploit capability is unauthorized withdrawal or effective minting/release of bridged assets, potentially leading to total bridge drain. The Python file is not a full exploit implementation; it is only a minimal illustrative script that prints the attack concept, so the repository should be classified as a POC rather than an operational exploit. No concrete RPC endpoints, wallet addresses, contract addresses, IPs, or domains used for exploitation are embedded in the code; only documentation URLs and local file names are present.