zkLink Nova Bridge Loses $786K in Forged Root Exploit

zkLink Nova Bridge Drained for About $783,000 in Forged Root Exploit - The Cryptocurrency Post

zkLink Nova’s bridge has been reported drained for about $783,100 after an attacker allegedly used a forged batch root to trigger unauthorized withdrawals, according to a SlowMist incident entry. The loss came from the protocol’s cross-chain bridge flow, where Ethereum-side escrow contracts were apparently made to accept fraudulent withdrawal instructions. The incident record says the […]

zkLink Nova Bridge Loses $786K in Forged Root Exploit

Blockchain security firm Blockaid detected an ongoing exploit against zkLink Nova’s bridge on Ethereum, reporting that an attacker used a public relayer to inject a forged batch root. The attacker then finalized ETH and ERC-20 withdrawals from Nova’s Layer 1 escrow to addresses of their choosing. Blockaid estimated roughly $786,000 had been drained when it ...

Forged batch root empties zkLink Nova's Ethereum escrow

An attacker used a forged batch root to drain zkLink Nova's Ethereum escrow to about 0.001 ETH. Blockaid put the loss at ~$786,000 so far.

zkLink Reports $783K Loss Due to Exploit, Says SlowMist

zkLink faces a $783K loss due to a recent exploit. Here's what this means for the platform's future.

zkLink Nova Bridge Drained of $786K After Forged Batch Root Exploit

An attacker drained approximately $786,000 in cryptocurrency from zkLink Nova’s Ethereum bridge after exploiting its cross-chain verification process to authorize fraudulent withdrawals. The attack, detected by blockchain security firm Blockaid, involved submitting a forged batch root through a publicly accessible relayer. The malicious transaction enabled unauthorized withdrawals of Ether (ETH) and ERC-20 tokens from zkLink… Continue reading zk…