layer-1 vulnerability