TREE NEWS update: zkLink halted its Nova network on Thursday, patched affected contracts and disabled withdrawals after an attacker faked withdrawal approvals to drain more than $780,000 from its bridge to Ethereum, the team said. Security firms identified the exploit, which let the attacker move funds out of the bridge.
zkLink Nova Halted After Bridge Exploit Drains Over $780,000
The significance here is less the size of the loss than the attack vector: forged withdrawal approvals strike at the core trust assumption of a bridge, the component that connects an L2 to Ethereum and holds user funds in transit. The immediate fallout lands on Nova users whose withdrawals are now disabled, and on zkLink's credibility as it patches contracts under scrutiny. What's worth watching is whether the patch restores withdrawals without a second flaw, and whether the team offers a credible account of how approvals could be faked in the first place.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.