Zklink

Security incidents tagged Zklink. Newest first.

1 Zklink incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

HighNo patch yet
zkLink Nova's Ethereum bridge drained of about $786K through a forged batch root
An attacker drained about $779K to $786K in ETH and 11 ERC-20 tokens (mostly pufETH) from zkLink Nova's Ethereum escrow and ERC-20 bridge in a single transaction on Oct 28 at 22:21 UTC. Blockaid says the attacker used a public relayer to inject a forged batch root and then finalized withdrawals to addresses they chose. SlowMist traces the root cause to the Arbitrator contract's claimMessage function, which did not clear a stored message hash or require a fresh authenticated callback, letting the publicly callable SyncL2TxHashRelayer make ZkLink.syncBatchRoot run as the legitimate Ethereum gateway. Blockaid called the attack ongoing and the main escrow still showed as unpaused hours later; zkLink had not commented.
zkLink Nova bridge (Ethereum L1 escrow and ERC-20 bridge)Since Oct 28, 2026updated Oct 29, 2026, 07:10 UTC

zkLink Nova's Ethereum bridge drained of about $786K through a forged batch root
Blockaid
@blockaid_
🚨Blockaid detected an ongoing exploit on @zkLink_Official bridge on ethereum. Used a public relayer to inject a forged batch root on Ethereum, then finalized ETH and ERC20 withdrawals from zkLink Nova L1 escrow to attacker-chosen receivers. ~$786k drained from L1 ETH escrow and ERC20 bridge so far. Attack still ongoing.🧵
Oct 29, 2026view on x