Attacker Drains zkLink Nova Ethereum Escrow of $786,000 Using Forged Batch Root

zkLink Nova's Ethereum Layer 1 escrow balance has been drained down to approximately 0.001 ETH following an active security exploit. Blockchain security firm Blockaid reported that an attacker submitted a forged batch root through a public relayer on the Ethereum network, enabling unauthorized withdrawals from Nova's L1 escrow and ERC-20 bridge. Preliminary total losses are estimated at roughly $786,000. A single withdrawal transaction moved 22.43 ETH and 11 ERC-20 tokens worth $778,625 to a single wallet, led by 245.74 pufETH valued at roughly $613,536 alongside USDC and USDT.