zkLink Nova Exploit: A Stale Transient Hash Forged a Root

How a never-cleared transient hash and a caller-chosen call target let an attacker forge a zkLink Nova batch root and drain about $780K on Ethereum.