Question 1

How much was taken in the zkLink Nova bridge exploit?

Accepted Answer

Blockaid put the loss at ~$786,000 in ETH and ERC-20 tokens. One transaction alone moved $778,625.84 at Etherscan's prices.

Question 2

How did the attacker drain the escrow?

Accepted Answer

The attacker used a public relayer to inject a forged batch root on Ethereum, then finalized withdrawals from zkLink Nova's Layer 1 escrow.

Question 3

Is this similar to other recent bridge hacks?

Accepted Answer

Yes. On October 17, a fraudulent mint message forced 10 million unauthorized CYS tokens out of Cysic's cross-chain bridge.

zkLink

One sharp brief.
Every day.