Lost approximately $786,000, zkLink cross-chain bridge under sustained attack

Odaily reports that the zkLink cross-chain bridge on Ethereum is under sustained attack. The attacker exploited a public relayer to inject forged batch roots on Ethereum, then confirmed ETH and ERC20 withdrawals from zkLink Nova's L1 escrow contracts and transferred the funds to designated receiving addresses. Currently, approximately $786,000 has been stolen from the L1 ETH escrow contract and ERC20 bridge, and the attack is still ongoing.