I wish he exploited the sighash_single bug. I thought he did in input 8 (whose signature uses sighash_one) but I checked the sig and the sighash wasn't one -- because the op_return counts as an output for purposes of calculating the sighash, so he signed a hash of his input plus that op_return "output"
Oh! Good point, that would have been cool!
reply
That would require a different layout of inputs/outputs, since the only input with index higher than all outputs is a P2TR input, and the sighash_single bug is fixed in Taproot.
reply
Yeah but that would be totally worth it imo. It's a very cool bug and no one ever uses it, an art piece like this would be a great opportunity to showcase it
reply