zkLink Nova contracts under attack; project offers 20% bounty for cooperation

Huo Xing Cai Jing reports that zkLink, a聚合 Rollup infrastructure provider, has confirmed an ongoing attack on its aggregated Layer 3 network, zkLink Nova, targeting the Arbitrator contracts on Ethereum and Optimism. zkLink stated that its technical team is urgently containing the situation and preventing further losses, with updates to be provided to the community shortly. zkLink urges all involved parties to cease further exploitation of zkLink Nova’s smart contracts on all chains and return the affected funds. The project team indicated that, if the attackers cooperate in returning the funds, it is prepared to offer a 20% bug bounty reward and will refrain from further pursuit once the funds are returned. Security firm Blockaid previously monitored that the attacker injected forged batch roots via public relayers on Ethereum, then extracted ETH and ERC-20 tokens from zkLink Nova’s L1 custody contract. At the time, the combined losses from the L1 ETH custody and ERC-20 bridge amounted to approximately $7.86 million, and the attack remains ongoing.