1 min read
Add as a preferred source on Google

Forged Batch Root Drains zkLink Nova’s Ethereum Escrow to 0.001 ETH

Blockaid estimated losses at about $786,000 as of late Wednesday. A large withdrawal transferred 22.43 ETH and 11 ERC-20 tokens.

Mentioned assets
A single metal token rests inside an open steel custody box / TokenPost.ai
A single metal token rests inside an open steel custody box / TokenPost.ai

An attack on zkLink Nova’s Ethereum escrow left roughly 0.001 Ether (ETH) in the contract after a forged batch root enabled withdrawals of funds meant for cross-chain transfers.

Blockaid said the attacker submitted the root through a public relayer on Ethereum before finalizing withdrawals. A large transaction at 6:21:35 p.m. ET Wednesday, Oct. 28, sent 22.43 ETH and 11 ERC-20 tokens to one address.

The escrow balance stood at about 0.001 ETH at 10:29 p.m. ET. Blockaid estimated the loss at about $786,000 “so far” in an alert at 10:24 p.m. ET and described the attack as ongoing at that time. The estimate was an interim figure.

zkLink’s settlement design verifies transaction batches on Ethereum and sends their roots to secondary chains, where withdrawal requests can be completed using assets held in smart contracts.

Simon Yoon

Reporter

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.

Loading…