SlowMist says the cross-chain protocol zkLink was attacked on 29 Oct, losing about $783,000. The attacker reused a leftover verification value in transient storage to forge batch roots and made 12 withdrawals, one in ETH and 11 in ERC-20 tokens.
zkLink loses about $783,000 in attack exploiting transient storage flaw, SlowMist says
NewsFeeds update
The story so far: zkLink Nova bridge attack
An attacker used a public relayer to inject a forged batch root on Ethereum and finalised withdrawals from zkLink Nova's L1 escrow, stealing about $786,000. zkLink offered a 20% white hat bounty and halted Nova block production and withdrawals. zkLink now asks Optimism to freeze 224,133 OP tied to the 29 Oct escrow…
Headlines only, oldest first. Open a headline for the full update and the outlet it came from.
zkLink loses about $783,000 in attack exploiting transient storage flaw, SlowMist says
More Ethereum updates
Every update is a short rewrite, by AI in our own words, of a flash from the outlet named on it, credited and linked. Updates are joined into one story by AI; our editors can change a story’s name or take an update out. Not investment advice.
Breaking news and our own Originals on your phone or desktop, the moment they are out. A few alerts a day at most.
