[Cross-chain protocol zkLink attacked, resulting in approximately $783,000 in losses] The cross-chain protocol zkLink was attacked on October 29th, resulting in approximately $783,000 in losses. The attackers used residual verification values in transient storage to forge batch roots, completing one ETH withdrawal and 11 ERC-20 token withdrawals. The attackers retrieved verification values through genuine cross-chain messages, reused these values in the same transaction, and used relay and gateway contracts to write forged batch roots. The relevant contracts did not clear the verification values or bind them to the current call; the batch root update only verified the gateway identity and lacked independent proof verification. (Source: SlowMist)