zkLink Bridge Exploit Drains About $786,000
Blockaid reported an ongoing zkLink bridge attack on Ethereum in which an attacker exploited a publicly accessible relayer to submit a forged batch root. The attacker then finalized fraudulent ETH and ERC-20 withdrawals from zkLink Nova’s L1 custody contract to an address under their control. About $786,000 in assets had been taken at the time of the report, including roughly 22.43 ETH and 245.74 pufETH valued at about $613,500, alongside other tokens such as USDC and USDT. The attack was still in progress, and zkLink had not confirmed whether withdrawals were halted, funds recovered or a fix deployed. The zkLink bridge exploit raises further concerns about cross-chain security and could affect user confidence and liquidity.
Neutral
The exploit is a serious security and liquidity concern for zkLink bridge users, but the reports do not establish a direct or lasting price effect on ETH or the other named tokens. In the short term, traders may react to the ongoing attack with caution, while affected users could sell or withdraw assets if they fear further losses. Such activity may create isolated liquidity pressure, particularly for assets tied to the bridge. Over the longer term, the impact on token prices will depend on whether zkLink contains the exploit, clarifies the scale of losses and restores confidence. Historically, bridge incidents can weigh on sentiment around affected projects, but the available information is not enough to assign a clear directional price impact to the named cryptocurrencies overall.