According to CoinMeta, as monitored by blockchain security firm Blockaid, the cross-chain bridge zklink nova on Ethereum is under attack. Attackers used public relays to inject forged batch state roots into Ethereum, and then extracted assets ETH and ERC-20 from the L1 contract hosted on Ethereum to addresses designated by the attackers. As of the time of this alert on Blockaid, the relevant ETH hosted contract and ERC-20 cross-chain bridge had suffered losses of approximately $786,000, and the attack is still ongoing. The final extent of the losses and the cause of the vulnerability are still to be further confirmed.