News · Security & Hacks
The team paused block production and disabled withdrawals after an exploit targeted its Arbitrator contract on Ethereum and Optimism.
Key point 1 of 3
01
zkLink paused Nova block production and disabled withdrawals after an attacker siphoned over $780,000 from its cross-chain bridge on Oct. 28 .
Key point 2 of 3
02
Security firms traced the issue to Nova's Arbitrator contract on Ethereum and Optimism, which allowed unauthorized batch root submissions .
Key point 3 of 3
03
The zkLink team deployed contract patches, offered a 20% bounty for the return of funds, and gave no fixed timeline for restoring services .
Context
Cross-chain bridges remain persistent vectors for protocol exploits, with attackers continuing to target smart contract verification functions and relayer mechanisms.
Why it matters
Users of zkLink Nova cannot bridge or withdraw assets while the network remains halted and contracts stay paused during security reviews.
What to watch
Confirmation from zkLink regarding the restart date for Nova services and whether the attacker accepts the 20% white-hat bounty offer.
Sources
Built from 1 primary source, machine-checked before publication.
Keep reading
Read the full story
AI-generated, source-verified. Sources, citations and live prices on the article page.