🚨 zkLink Nova's Ethereum bridge reportedly lost around $786K — and the key issue wasn't token prices
According to Blockaid, an attacker used a public relayer to inject a forged batch root, then finalized unauthorized ETH and ERC-20 withdrawals from bridge reserves
$ETH
🔍 A batch root is supposed to authenticate transaction history before assets are released
If the bridge accepts a forged root, withdrawal proofs can appear valid against a history that never legitimately existed
That's the dangerous part
Real assets can leave escrow without a matching legitimate withdrawal on the other side
⚠️ Blockaid described the attack as ongoing in its initial alert, but containment and final losses remain unconfirmed
📌 If you rely on zkLink Nova's bridge, verify official security updates before making new transfers
This is a warning about cross-chain message verification — not proof that Ethereum or zero-knowledge cryptography itself was compromised $ETH
#zkLink #Ethereum
According to Blockaid, an attacker used a public relayer to inject a forged batch root, then finalized unauthorized ETH and ERC-20 withdrawals from bridge reserves
$ETH
🔍 A batch root is supposed to authenticate transaction history before assets are released
If the bridge accepts a forged root, withdrawal proofs can appear valid against a history that never legitimately existed
That's the dangerous part
Real assets can leave escrow without a matching legitimate withdrawal on the other side
⚠️ Blockaid described the attack as ongoing in its initial alert, but containment and final losses remain unconfirmed
📌 If you rely on zkLink Nova's bridge, verify official security updates before making new transfers
This is a warning about cross-chain message verification — not proof that Ethereum or zero-knowledge cryptography itself was compromised $ETH
#zkLink #Ethereum
