RUG.TOOLS
RUG.TOOLS
Launchpad
exploitshigh

SlowMist reports $780K zkLink exploit

By Rug.Tools Security Desk

What was reported

SlowMist reports that zkLink was attacked on October 29, 2026, causing approximately $783,000 in losses. The analysis describes forged batch-root verification and lists affected Ethereum and Linea bridge infrastructure.

Why it matters

A forged withdrawal root can make unauthorized withdrawal messages appear valid, putting protocol-held ETH and ERC-20 funds at risk.

Evidence and limitations

  • The source explicitly reports an attack against zkLink and approximately $783,000 in losses.
  • The source identifies Ethereum contracts involved in messaging, bridging, treasury custody, and arbitration.
  • The excerpt also names a Linea gateway, but Linea is not a supported output chain, so no Linea address is included.

Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to SlowMist; they are not presented as deterministic Rug.Tools findings.

Verified address format from source material

Format and source presence were validated. This does not independently prove the publisher's wider claims.

Ethereum0x5fd9f73286b7e8683bab45019c94553b93e015cf
Scan Token
Ethereum0xad16edcf7deb7e90096a259c81269d811544b6b6
Scan Token
Ethereum0x83bc7394738a7a084081af22eec0051908c0055c
Scan Token
Ethereum0x1ee09a2caa0813a5183f90f5a6d0e4871f4c6002
Scan Token

Original source

Source publication time:

Read SlowMist

This report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.