zkLink bridge on Ethereum hit by ongoing attack, about $786,000 lost

The story so far: zkLink Nova bridge attack

An attacker used a public relayer to inject a forged batch root on Ethereum and finalised withdrawals from zkLink Nova's L1 escrow, stealing about $786,000. zkLink says an attack is targeting its Nova arbitrator contracts on Ethereum and Optimism, and it offered a 20% white hat bounty for return of the funds.

1. 29 Oct 202602:28 UTC

   zkLink bridge on Ethereum hit by ongoing attack, about $786,000 lost

   An attacker used a public relayer to inject a forged batch root on Ethereum and finalised ETH and ERC20 withdrawals from zkLink Nova's L1 escrow contract, moving the funds to an address they control. About $786,000 has been stolen from the L1 ETH escrow and ERC20 bridge, and the attack is still ongoing.

   EthereumOdailyAIBearish

2. 29 Oct 202609:13 UTC

   zkLink says Nova arbitrator contracts under attack on Ethereum and Optimism

   zkLink says an attack is targeting its Nova arbitrator contracts on Ethereum and Optimism, and its technical team is responding to contain it. It urged the attacker to return the funds and offered a 20% white hat bounty for restitution.

   EthereumCoinNessAIBearish