This EVM (Ethereum, BNB Chain, Base and other EVM chains) address was named in 1 public crypto scam report: Hack. First reported 2026-10-29. Last updated 2026-10-29.

zkLink Nova bridge exploit on Ethereum (28-29 Oct 2026): about $783K drained with a forged batch root; one attacker wallet also in the X100 exploit

Scam type: Hack
Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
Project or site name: zkLink Nova (Ethereum bridge)
Incident date: 2026-10-28
Reported: 2026-10-29
Last updated: 2026-10-29

Attackers drained the zkLink Nova bridge escrow on Ethereum on 28-29 October 2026, taking about $783,100 according to SlowMist. Blockaid first flagged the exploit as ongoing at 02:24 UTC on 29 October. How it worked (per SlowMist): Arbitrator.claimMessage did not clear a stored message hash, so the attacker reused a valid hash through a public relayer to make the bridge accept an attacker-chosen batch root, then withdrew ETH and ERC20 tokens with forged proofs. Attacker addresses named by SlowMist: 0xaca0655a11200a80d33d0e48786317304cde5718 0xdab137f390df77caa97fd492540e973fd5e2f8c8 On-chain:…

Other addresses in this report: 0xdab137f390df77caa97fd492540e973fd5e2f8c8

Linked reports: X100 exploit (2026-10-24) follow-up: second attacker's payout and cash-out wallets, and the third exploiter wallets that took 549,916 X