Ready for the Pengs? Things are about to get chilly on #Linea#! Our free mint is coming soon. Make sure to interact with all tweets for a chance at WL! #LineaNFT# #LineaAirdrop# #linea_eth# #LineaEcosystem#

Consensys is heading to @Sibos Miami. @mkriak and @davebarna will be meeting with financial institutions to discuss how they can benefit from Ethereum, Linea and Besu. If you’ll be at Sibos, get in touch with Mike and Dave to connect in Miami. 📍 Miami 📅 28 Sept - 01 Oct

TRANSACTIONS ON POPULAR #BLOCKCHAINS# IN JULY #Robinhood# #Monad# #Plasma# #Aptos# #Hyperliquid# #OPMainnet# #BNBChain# #Base# #Avalanche# #Ink# #Tron# #Polygon# #Arbitrum# #Sui# #Ton# #Ethereum# #Solana# #Sonic# #NEAR# #Linea#

THIS WEDS: Learn more about the code & community at Lineth Technical Deep Dive: Inside the Production-Grade ZK Rollup Stack July 8, 2026, 6amPT/9amET/3pmCET Register: #eth# #ethereum# #lineth# #ZeroKnowledge# #EVM# #linea# #ZKP# #ZeroKnowledgeProof# #roadmap#

NEXT WEEK: Learn about the code & community at Lineth Technical Deep Dive: Inside the Production-Grade ZK Rollup Stack July 8, 2026, 6amPT/9amET/3pmCET Register: #eth# #ethereum# #lineth# #ZeroKnowledge# #EVM# #linea# #ZKP# #ZeroKnowledgeProof# #roadmap# #Technical#

Learn more about the code & community at Lineth Technical Deep Dive: Inside the Production-Grade ZK Rollup Stack July 8, 2026, 6amPT/9amET/3pmCET Register: #eth# #ethereum# #lineth# #ZeroKnowledge# #EVM# #linea# #ZKP# #ZeroKnowledgeProof# #roadmap# #Technical# #demo#

Learn more about the code & community at Lineth Technical Deep Dive: Inside the Production-Grade ZK Rollup Stack July 8, 2026, 6amPT/9amET/3pmCET Register: #eth# #ethereum# #lineth# #ZeroKnowledge# #EVM# #linea# #ZKP# #ZeroKnowledgeProof# #roadmap# #Technical# #demo#

🚨 On October 29, 2026, cross-chain protocol @zkLink_Official was exploited for approximately $783K. The SlowMist Security Team analyzed the incident and uncovered how a transient storage flaw led to forged batch roots and unauthorized withdrawals. 🧩 Attack Flow: 1️⃣ Queried totalBatchesExecuted and selected the next batch (116409) for forgery. 2️⃣ Executed a genuine Linea claim through SyncL2TxHashRelayer, writing finalizeMessageHash into transient storage. 3️⃣ Reused the stale finalizeMessageHash in a second claimMessage call, triggering an attacker-controlled call to EthereumGateway. 4️⃣ Used EthereumGateway.sendMessage to call ZkLink.syncBatchRoot, forging the batch root and advancing totalBatchesExecuted. 5️⃣ Executed 12 withdrawals against the forged root: 1 ETH and 11 ERC-20 transfers using forged Merkle proofs. ⚙️ Root Cause: Arbitrator.claimMessage allows relayers to specify arbitrary call targets and calldata, while failing to clear or bind finalizeMessageHash to the current invocation. Combined with ZkLink.syncBatchRoot only checking gateway identity without verifying batch proofs, this enabled batch root forgery. 🔒 Recommendations: When reviewing similar cross-chain relayer projects, pay attention to four areas: 1️⃣ Reset transient storage before each call. 2️⃣ Bind verification values to the current invocation. 3️⃣ Check whether arbitrary users can indirectly leverage trusted callers through public helper contracts or relayers. 4️⃣ Independently verify batch root updates rather than relying solely on caller identity. Full analysis 👇