zkLink confirms ongoing attack on zkLink Nova, offers 20% white-hat bounty

zkLink confirms ongoing attack on zkLink Nova, offers 20% white-hat bounty

N
News Editor
2026-10-29 11:32:00
zkLink said it has confirmed an ongoing attack targeting the Arbitrator contracts tied to zkLink Nova, its aggregated Layer 3 network, on Ethereum and Optimism. The team said it is working urgently to contain the situation and prevent additional losses, with further updates to be shared with the community later. The project also called on the party involved to stop exploiting zkLink Nova contracts across chains and return the affected funds. zkLink said it is prepared to offer a 20% white-hat bounty if the funds are returned, adding that it will not pursue the matter further after repayment. Security firm Blockaid had earlier said the attacker injected a forged batch root on Ethereum through a public relayer, then withdrew ETH and ERC-20 tokens from zkLink Nova’s L1 custody contract. At the time, Blockaid estimated combined losses from the L1 ETH custody and ERC-20 bridge at about $786,000, and said the attack was still ongoing.

zkLink said it has confirmed an ongoing attack on the Arbitrator contracts for zkLink Nova, its aggregated Layer 3 network, on Ethereum and Optimism.

The project said its technical team is working urgently to contain the incident and prevent further losses. It added that it will update the community as more information becomes available.

zkLink also called on the relevant party to stop any further exploitation of zkLink Nova contracts across chains and return the affected funds. The team said it is prepared to offer a 20% white-hat bounty if the funds are returned, and that it will not pursue further action after repayment.

Blockaid had earlier said the attacker injected a forged batch root on Ethereum through a public relayer, then withdrew ETH and ERC-20 tokens from zkLink Nova’s L1 custody contract.

At the time, Blockaid estimated that losses tied to the L1 ETH custody and ERC-20 bridge totaled about $786,000, and said the attack was still ongoing.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
700

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.