# Forged Batch Root Drains zkLink Nova’s Ethereum Escrow to 0.001 ETH

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/43373
Published: 2026-10-29T09:21:18.000Z
Updated: 2026-10-29T09:21:18.000Z
Section: Technology

> Blockaid estimated losses at about $786,000 as of late Wednesday. A large withdrawal transferred 22.43 ETH and 11 ERC-20 tokens.

An attack on zkLink Nova’s Ethereum escrow left roughly 0.001 Ether (ETH) in the contract after a forged batch root enabled withdrawals of funds meant for cross-chain transfers.

Blockaid said the attacker submitted the root through a public relayer on Ethereum before finalizing withdrawals. A large transaction at 6:21:35 p.m. ET Wednesday, Oct. 28, sent 22.43 ETH and 11 ERC-20 tokens to one address.

The escrow balance stood at about 0.001 ETH at 10:29 p.m. ET. Blockaid estimated the loss at about $786,000 “so far” in an alert at 10:24 p.m. ET and described the attack as ongoing at that time. The estimate was an interim figure.

zkLink’s settlement design verifies transaction batches on Ethereum and sends their roots to secondary chains, where withdrawal requests can be completed using assets held in smart contracts.