zkLink Nova canonical bridge loses $778,625 in suspected exploit
CIE News ·
Based on reporting by The Defiant; not yet independently confirmed.
An attacker drained $778,625.84 in mixed assets from the zkLink Nova canonical bridge on Ethereum using a forged batch root, according to The Defiant.
An attacker drained $778,625.84 in mixed assets from the zkLink Nova canonical bridge on Ethereum on October 28, 2026, according to The Defiant. The exploit reportedly involved injecting a forged batch root through a public relayer to authorize illicit withdrawals, including 22.43 ETH, 245.74 pufETH, 18,113 USDC, and 3,361 USDT. As of 02:29 UTC on October 29, the main Ethereum escrow contract remained unpaused while investigators checked for other fail-safes.
Key facts
- $778,625.84 drained
- zkLink Nova bridge
- Forged batch root exploit
- Contract unpaused
Read the original at The Defiant