zkLink Cross-Chain Bridge on Ethereum Under Attack, Approximately $786,000 Lost

October 29 — According to Blockaid monitoring, an ongoing attack has been detected on the zkLink cross-chain bridge on Ethereum. The attacker used a public relayer to inject a forged batch root on Ethereum, then finalized ETH and ERC20 withdrawals from zkLink Nova's L1 escrow contract, transferring the funds to an attacker-designated receiving address. Approximately $786,000 has been stolen so far from the L1 ETH escrow and ERC20 bridge. The attack is still ongoing.