zkLink Nova: about $783K exploit on Ethereum
. Reported by public sources (confirmed by DeFiLlama). Amounts are as reported; the trace below shows what the chain says.
On 2026-10-28 (reported on, per DeFiLlama), zkLink Nova suffered an exploit on Ethereum with reported losses of about $783,100. Phalcon attributed the roughly $780K loss to flawed authentication-state verification in the Arbitrator, while Defimon put the loss near $805K and described a rollup batch-root forgery. SlowMist said a transient storage flaw was behind the incident. The reports do not name an attacker address or trace where the funds went, and no recovery or freezing has been reported.
Amount: about $783K (reported). Networks: Ethereum.
What is known
- Reported
- By DeFiLlama, @Phalcon_xyz, @DefimonAlerts, @SlowMist_Team.
- Confirmed
- Confirmed by DeFiLlama. The amount is as reported.
- Recorded on Kadena
- Not yet.
- Attacker address
- None attributed by a source yet.
- Frozen
- No freeze read on chain.
- Returned
- No return of funds recorded here.
- Trace coverage
- Not traced yet: the trace starts when a source names an address.
Sources
- DeFiLlama
- @Phalcon_xyz: Our system detected a suspicious transaction targeting zkLink Nova, resulting in approximately $780K in losses. The root cause was flawed authentication-state v
- @Phalcon_xyz: Our system detected a suspicious transaction targeting zkLink @zkLink_Official Nova, resulting in approximately $780K in losses. The root cause was flawed authe
- @DefimonAlerts: 🚨 @zkLink_Official - Loss ~$805K (2026-10-28) Network: Ethereum Type: Rollup batch-root forgery → forged L2→L1 withdrawal The owner-gated harness (0xd5f1...ff0
- @SlowMist_Team: 🚨 On October 29, 2026, cross-chain protocol @zkLink_Official was exploited for approximately $783K. The SlowMist Security Team analyzed the incident and uncove
Timeline
- Post cited by the coverage: @SlowMist_Team link
- Post cited by the coverage: @DefimonAlerts link
- Post cited by the coverage: @Phalcon_xyz link
- Post cited by the coverage: @Phalcon_xyz link
- Detected from DeFiLlama: about $783,100 link
Read: How to trace stolen crypto, hop by hop.
Facts about addresses and transactions, never about people. Trace a wallet · Check an address · All live incidents