The zkLink Nova cross chain bridge, which operates on Ethereum, was drained of approximately $786,000 in an exploit that was detected on 29 October 2026. The attack targeted the bridge's custody contract on Ethereum's Layer 1, according to initial reports. The incident adds to a growing list of bridge security failures in the cryptocurrency sector, where such platforms remain a prime target for malicious actors.
According to security researchers, the attacker exploited a public relayer to inject forged batch roots onto Ethereum. Batch roots are cryptographic commitments that summarize a set of transactions processed on a Layer 2 network. By forging these roots, the attacker was able to trick the bridge's L1 custody contract into accepting unauthorized withdrawals. The forged roots were then used to confirm and execute withdrawals of both ETH and ERC20 tokens directly from the contract.
The exploit was flagged by security firm Blockaid while it was still ongoing. Blockaid's monitoring systems detected suspicious activity and alerted the community, but by then the attacker had already begun moving the stolen funds. The stolen assets were transferred to addresses controlled by the attacker, making recovery difficult. The total loss is estimated at around $786,000, though the exact figure may be subject to further verification.
Cross chain bridges are designed to facilitate the transfer of assets between different blockchain networks. They typically lock assets on one chain and mint equivalent representations on another, or they use a burn and mint mechanism. Because they hold large amounts of value in custody, they present a high value target for hackers. The zkLink Nova bridge is one of many such bridges that have been exploited in recent years.
The attack on zkLink Nova is the latest in a long line of cross chain bridge losses. Notable incidents include the Ronin bridge hack in 2022, which resulted in losses of over $600 million, and the Wormhole bridge exploit that same year, which saw $320 million stolen. More recently, smaller bridges have continued to fall victim to similar vulnerabilities. These incidents have collectively cost the crypto industry billions of dollars and have eroded trust in bridge security.
Security experts have repeatedly warned that bridges are complex and often contain subtle bugs that can be exploited. The use of public relayers, which allow anyone to submit transactions, can be particularly risky if proper validation is not in place. In the zkLink Nova case, the attacker appears to have taken advantage of insufficient verification of batch roots, allowing forged data to be accepted by the custody contract.
The zkLink team has not yet released a detailed statement on the incident. It is unclear whether the bridge will be paused or whether any recovery efforts are underway. Users who had assets on the bridge may face losses, and the project's native token could be affected. The incident highlights the need for continuous auditing and real time monitoring of bridge contracts.
In response to the growing threat, several projects are developing more secure bridge designs, including the use of zero knowledge proofs and decentralized validators. However, these solutions are still evolving and have their own tradeoffs. For now, bridges remain a weak point in the decentralized finance ecosystem, and attacks like the one on zkLink Nova are likely to continue.
The crypto community has reacted with concern to the news, with many calling for increased security measures. Some have pointed out that the exploit was detected quickly, but the damage was already done. Others have emphasized the importance of using audited and battle tested bridge protocols. As the industry matures, it is expected that regulators and users will demand higher standards for bridge security.
This incident serves as a reminder that despite advances in blockchain technology, security remains a critical challenge. The zkLink Nova bridge exploit is a stark example of how a single vulnerability can lead to significant financial losses. As the investigation continues, the industry will be watching closely to see what lessons can be learned and how future bridges can be made more resilient.