SlowMist reports $780K zkLink exploit
What was reported
SlowMist reports that zkLink was attacked on October 29, 2026, causing approximately $783,000 in losses. The analysis describes forged batch-root verification and lists affected Ethereum and Linea bridge infrastructure.
Why it matters
A forged withdrawal root can make unauthorized withdrawal messages appear valid, putting protocol-held ETH and ERC-20 funds at risk.
Evidence and limitations
- The source explicitly reports an attack against zkLink and approximately $783,000 in losses.
- The source identifies Ethereum contracts involved in messaging, bridging, treasury custody, and arbitration.
- The excerpt also names a Linea gateway, but Linea is not a supported output chain, so no Linea address is included.
Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to SlowMist; they are not presented as deterministic Rug.Tools findings.
Verified address format from source material
Format and source presence were validated. This does not independently prove the publisher's wider claims.
0x5fd9f73286b7e8683bab45019c94553b93e015cf0xad16edcf7deb7e90096a259c81269d811544b6b60x83bc7394738a7a084081af22eec0051908c0055c0x1ee09a2caa0813a5183f90f5a6d0e4871f4c6002Original source
Source publication time:
Read SlowMistThis report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.
