zkLink Nova confirms exploit of Arbitrator contract; ~$786K drained from Ethereum bridge

zkLink Nova confirmed an ongoing exploit of its Arbitrator contract on Ethereum and Optimism, suspending block production on Nova, rushing fixes and turning off withdrawals. Blockaid flagged roughly $786K drained from its Ethereum bridge via a public relayer injecting forged batch state roots; SlowMist traced the root cause to Arbitrator.claimMessage failing to clear a transient finalizeMessageHash.

Detected & updated continuously · Source: Nebula