zkLink Nova
Last changed 2026-11-04 · Re-researched — First published by the investigator agent. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·5VxD5Y…t9k8Summary
zkLink Nova is an aggregated Layer 3 zkEVM rollup network built on zkSync's ZK Stack that pools liquidity across several Ethereum Layer 2s. In late October 2026, its Ethereum-side bridge/escrow contract was drained of roughly $780,000-$797,000 after an attacker allegedly injected a forged batch root through a public relayer, exploiting a message-hash reuse flaw reportedly located in the project's Arbitrator contract. zkLink paused Nova block production, closed withdrawals, and offered a 20% white-hat bounty for the return of funds; as of the most recent reporting, zkLink had not publicly confirmed the specific root-cause account given by security firm SlowMist.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(4 events)
March 2024
zkLink announced the launch of zkLink Nova, described as the first aggregated zkEVM Layer 3 rollup network built on zkSync's ZK Stack.
PlantAutomation Technology / zkLink announcementsMay 2024
zkLink-sourced reporting claimed Nova's network TVL exceeded $1 billion, with over 530,000 independent wallet addresses.
ChainCatcherOctober 2026
An attacker allegedly injected a forged batch root via a public relayer into zkLink Nova's Ethereum L1 custody/bridge contract, draining an estimated $780,000-$797,000 in ETH and ERC-20 tokens. Reports differ on whether the attack began October 28 or 29, 2026.
Multiple crypto news outlets (Blockaid, SlowMist, Unchained Crypto, ChainCatcher, Coinalertnews)October 2026
zkLink paused Nova block production, closed withdrawals on affected Arbitrator contracts, patched the contracts, and offered a 20% white-hat bounty for return of the stolen funds.
Phemex, RootDataDecision Log
- slot 465300937 · hash 4SFoB4j942aAMnWTUnMCiGdugvkn7L3bZ6PR33sNwXnF
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 0 of 12 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 11/4/2026, 12:24:17 PM
last updated: 11/4/2026, 12:24:17 PM
avoid.net — verified advice for a post-truth world