zkLink Nova Escrow Drained to 0.001 ETH via Forged Batch Root on October 28

According to security firm Blockaid, an attacker drained zkLink Nova's Ethereum escrow to 0.001 ETH on October 28 by injecting a forged batch root through a public relayer and finalizing unauthorized withdrawals. Blockaid raised the alarm at 10:24 p.m. Eastern time, identifying the exploit targeting the zkLink Nova bridge's vulnerable withdrawal mechanism.
Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.