The zkLink cross-chain bridge on Ethereum is facing an ongoing attack, according to Odaily. The attacker reportedly used a public relayer to inject forged batch roots on Ethereum, then confirmed ETH and ERC20 withdrawals from zkLink Nova’s L1 custody contract. The stolen funds were then moved to an address designated by the attacker. So far, around $786,000 has been taken from the L1 ETH custody contract and the ERC20 bridge combined. Odaily said the attack was still in progress at the time of publication. The report did not disclose any additional technical details, mitigation steps, or the identities behind the receiving address.
The zkLink cross-chain bridge on Ethereum is under ongoing attack, according to Odaily.
The attacker used a public relayer to inject forged batch roots on Ethereum, then confirmed ETH and ERC20 withdrawals from zkLink Nova’s L1 custody contract and moved the funds to a designated receiving address.
About $786,000 has so far been stolen from the L1 ETH custody contract and the ERC20 bridge, and the attack is still ongoing.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
