zkLink Cross-Chain Bridge Attack Continues, With About $786,000 Stolen

The zkLink cross-chain bridge on Ethereum is under an ongoing attack. According to Odaily, the attacker used a public relayer to inject a forged batch root on Ethereum, then confirmed ETH and ERC-20 withdrawals from zkLink Nova’s L1 custody contract and sent the funds to a designated address. About $786,000 has been stolen from the L1 ETH custody contract and ERC-20 bridge, and the attack is still underway.