zkLink crosschain protocol loses $783,000 in transient storage exploit

AI Market Summary

zkLink's roughly $783,000 loss stems from a transient-storage validation flaw, where reused relay values forged batch roots and enabled twelve fraudulent withdrawals. While the dollar amount is immaterial to broader market liquidity, it reinforces persistent smart-contract and cross-chain bridge risk, a recurring governance and security concern that sustains defensive positioning in DeFi and marginal risk-off sentiment across crypto assets in the near term.

Impact level

● Low

Affected assets

BTC/USDT+0.51%

AI Insight · BTC/USDTAI Insight

▼ Bearish

Trade now

⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.

zkLink lost about $783,000 after an attacker used residual validation values in transient storage to forge batch roots and complete 12 withdrawals, one ETH and eleven ERC20. The attacker wrote a legitimate value through a real crosschain message, reused it within the same transaction, and injected a forged root through relay and gateway contracts. The value was not cleared or bound to the call.

Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.

Risk Warning

Cryptocurrencies and their derivatives are innovative financial products with great volatility and high investment risks.

Although BingX is committed to providing users with easy-to-use trading tools, trading itself is still a highly sophisticated field. Trading digital assets and their derivatives are subject to high market risk and price volatility and may result in partial or total loss of account funds. You must carefully consider and exercise clear judgment to evaluate your financial situation and the aforementioned risks before using BingX Services. You shall be responsible for all losses arising therefrom. If necessary, please consult relevant professionals to make informed decisions before investing. By accessing, downloading, using or clicking on "I agree" to accept any BingX Services provided by BingX, you agree that you have read, understood and accepted all of the terms and conditions stipulated in BingX Terms of Use as well as our Privacy Policy.

Trading by copying or replicating the trades of other traders involves a high level of risks, even when copying or replicating the top-performing traders. Past performance of a BingX community member is not a reliable indicator of his future performance. Content on BingX's trading platform is generated by members of its community and does not contain advice or recommendations by or on behalf of BingX.