Yeah, that glitch is basically an exploit. The sprite data in the OAM is getting overwritten when the game writes to the wrong address—so the sprite coordinates stay high and the sprite never hits the wall. If you look at the memory map for the 6502 in that level, you’ll see the subroutine that loads the castle layout is writing to $2002 instead of $2001, so the vertical scroll never resets. It’s a classic buffer overflow disguised as a rendering bug. If you patch that write, the bug goes away. If you want the exact byte addresses, you can dump the ROM, locate the 0x3B00–0x3BFF area that holds the OAM and check for any 0xFF bytes creeping in. That’s where the corruption happens. If you can’t see the bytes, just trace the CPU instructions around the frame that triggers the glitch. That’s the exploit.