zkLink Nova bridge attack
Story timeline · 2 updates, 29 Oct 2026
An attacker used a public relayer to inject a forged batch root on Ethereum and finalised withdrawals from zkLink Nova's L1 escrow, stealing about $786,000. zkLink says an attack is targeting its Nova arbitrator contracts on Ethereum and Optimism, and it offered a 20% white hat bounty for return of the funds.
Every update, oldest first
zkLink bridge on Ethereum hit by ongoing attack, about $786,000 lost
An attacker used a public relayer to inject a forged batch root on Ethereum and finalised ETH and ERC20 withdrawals from zkLink Nova's L1 escrow contract, moving the funds to an address they control. About $786,000 has been stolen from the L1 ETH escrow and ERC20 bridge, and the attack is still ongoing.
zkLink says Nova arbitrator contracts under attack on Ethereum and Optimism
zkLink says an attack is targeting its Nova arbitrator contracts on Ethereum and Optimism, and its technical team is responding to contain it. It urged the attacker to return the funds and offered a 20% white hat bounty for restitution.
Every update is a short rewrite, by AI in our own words, of a flash from the outlet named on it, credited and linked. Updates are joined into one story by AI; our editors can change a story’s name or take an update out. Not investment advice.
Breaking news and our own Originals on your phone or desktop, the moment they are out. A few alerts a day at most.