zkLink: Block Production Paused and Withdrawals Closed; Attackers Can Receive 20% White-Hat Bounty If Funds Returned

October 29: zkLink has released a security incident update, confirming an ongoing attack targeting the Arbitrator contracts of zkLink Nova on Ethereum and Optimism. The team has paused zkLink Nova block production; urgently patched the affected contracts and temporarily closed the withdrawal channel to cut off further attack paths; in addition, the technical team is conducting a comprehensive security review of all related components. The team stated that zkLink Nova's services will only be restored after all risks are confirmed to be eliminated. It also proposed to the attacker that returning the funds would earn a 20% white-hat bounty, with no further liability pursued.

Earlier reports indicated that the zkLink cross-chain bridge on Ethereum was under attack, with about $786,000 lost.