The ZKLink Nova bridge suffered an attack that drained approximately $779,000 in ETH and tokens through a single transaction, leaving the protocol's ETH escrow nearly empty. Blockaid identified that the exploit was carried out using a forged batch root, which enabled unauthorized withdrawals from the bridge contract. The incident highlights ongoing security risks in cross-chain bridge infrastructure as attackers continue to probe for vulnerabilities in layer-2 and zk-based protocols.