A compromised administrator account connected to the AirDrop contracts from ZKSYNC carried out a transaction that has made approximately $ 5 million to ZK -Tokens, so that the remaining non -computered allocation was stolen of the first token distribution of the network.
The attacker operated a function to claim the tokens on 15 April and issued around 111 million ZK tokens, equal to around 0.45% of the total token stock of the protocol.
According to pronouncement Shared by ZKSYNC on X, the exploit was limited to the AirDrop distribution contracts. It had no influence on the ZKSync protocol, the ZK -token contract, the governance infrastructure or covered miners related to the token program.
The protocol emphasized that user funds are never at risk and described the incident as isolated, as a result of a compromised private key that the affected admin account manages.
The attacker has already exchanged $ 3.5 million of the stolen ZK -Tokens to Ethereum (ETH), such as Data on chains point to.
The ZKSYNC team stated that recovery efforts are underway in coordination with fairs and blockchain security company Seal 911. The team has also made a public call for the attacker to contact them to negotiate a return of the funds and legal consequences.
According to the team’s forensic examination, the exploor can no longer mint tokens with the same Mint method. The incident has not influenced the activities at the protocol level or the safety of current management activities.
After internal assessments and recovery actions have been completed, the project will release a complete post-mortem.
ZK -Tokentanks
According to CryptoSlate data, the ZK -Token has fallen by 8.6% in the last 24 hours and is traded at $ 0.04513 from the moment of the press.
Since the launch, token has lost almost 90% of its value, a fact that is collected by members of the community in the aftermath of the exploit.
In response, Matter Labs is CEO Alex Gluchowski addressed worry on social media and said that the recording is comparable to Ethereum and other Layer-2 networks in the midst of the wider market correction.
Gluchowski said:
“ETH and every other L2 is considerable to their Aths. Nevertheless, both myself and Matter Labs are just as committed to the mission and the success of ZKSYNC. I also see very bullish signs of the new leadership of the Ethereum Foundation.”
Gluchowski added that he would do that Keep answering public questions About the incident while the investigation remains active. ZKSync repeated that they will share a technical update once they have completed a continuous security analysis.
Although limited in scope, the unauthorized mining has temporarily blown up circulating delivery and has led to an increased control of important management practices within the smart contract implementations of ZKSYNC.