Hack history / 2026 / Hack or exploit
zkLink Nova
Hack or exploit on Oct 28, 2026 · Cross-Chain Message Spoofing
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$783K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,007
among thefts by dollars lost
What happened
An attacker exploited zkLink’s Arbitrator contract, which failed to clear a previously authenticated message hash after processing a claim. By reusing that hash through the publicly accessible SyncL2TxHashRelayer, the attacker impersonated an authorized gateway message and installed a malicious L2 logs root. The attacker then submitted forged withdrawal proofs against the compromised root to drain approximately $783,100 from zkLink’s Ethereum bridge
Details
- Date
- Oct 28, 2026
- Kind
- Hack or exploit
- Method
- Cross-Chain Message Spoofing
- How in
- Bridge and cross-chain
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Stake Nova 2026 · Hack or exploit · $137K
Astra Nova 2025 · Hack or exploit · $9.1M
zkLink 2023 · Hack or exploit · undisclosed
Kelp 2026 · Hack or exploit · $293M
CrossCurve 2026 · Hack or exploit · $3M
Astra Nova 2025 · Hack or exploit · $9.1M
zkLink 2023 · Hack or exploit · undisclosed
Kelp 2026 · Hack or exploit · $293M
CrossCurve 2026 · Hack or exploit · $3M
Cite this page
SwanBluechip, "zkLink Nova hack, Oct 28, 2026: $783K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht8d8d58130d/ (data as of 2026-10-31).