ZKLINK EXPLOITED FOR $783K VIA TRANSIENT STORAGE FLAW The attacker manipulated stale data in transient storage to forge batch roots, executing 12 unauthorized withdrawals of 1 $ETH and 11 ERC-20 transfers. Security firm @SlowMist_Team warned that cross-chain relayer projects must reset transient storage and independently verify batch roots rather than relying on caller identities. The @zkLink_Official team offered a 20% white hat bounty for the return of the stolen assets.
This content is for informational and educational purposes only. It may include third-party insights, sponsored content, or promotional material for which the creator may receive compensation. Nothing in this feed constitutes investment advice or a guarantee of returns. You are solely responsible for your own investment decisions. Always conduct your own research and exercise caution before trading. We do not guarantee the accuracy of third-party information and are not liable for any losses incurred. Past performance is not indicative of future results. Please refer to our Community Terms and Risk Disclosure Statement for details.
Post your reply