# Bridge and vault exploits cost zkLink Nova, an Avalanche tranche vault and Initia about $4.5 million combined

A reused message hash, a double-draw in share accounting and a caching bug in Initia's Move virtual machine each produced withdrawals or tokens that the systems should have rejected.

- Published: 2026-10-31T05:43:59.168Z
- Canonical: https://polylog.news/crypto/2026-10-31/bridge-and-vault-exploits-cost-zklink-nova-an-avalanche-tran
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/d4bd931e758a375ed7fcecf52322dfeab54f8c0d), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/e9e8373e98b41eab024c162cfdf0220624aed8e1), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/be65db049660f57606ce892feb48461a11056da3), [Rekt News](https://www.rekt.news/), [Unchained](https://unchainedcrypto.com/zklink-nova-goes-offline-after-hacker-steals-more-than-780000-from-its-bridge/), [Unchained](https://unchainedcrypto.com/flash-loan-attacker-drains-about-1-million-in-usdc-from-avalanche-based-tranche-vault/), [Cointelegraph](https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained)

zkLink Nova (Ethereum and four layer-2 networks, about $783,000 to $797,000). DeFiHackLabs published a proof of concept showing a "transient-reuse" bug in zkLink Nova's Arbitrator bridge contract. The claimMessage function did not clear tem…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-31/bridge-and-vault-exploits-cost-zklink-nova-an-avalanche-tran (subscription information: https://polylog.news/pricing).