Cryptocurrency
[loss] $500,000
"ZKsync discloses $5 million attack from compromised airdrop admin account, triggering 20% price drop"
Primary Source ↗Financial Loss
$500,000
(500,000 USD)
Recovered
$4.5M
Blockchain(s)
Ethereum
Incident Details
An attacker compromised an admin account belonging to the ZKsync Ethereum layer-2 project, which is built by Matter Labs. By doing so, they were able to steal approximately $5 million worth of the ZK token, which the project said were “the remaining unclaimed tokens from the ZKsync airdrop”.ZK Sync offered a 10% “bug bounty” to the thief, who accepted and returned 90% of the stolen funds.
Total loss estimated at $500,000.
Technical Details
- Initial Attack Vector
- Smart contract exploit / hack
- Vendor / Product
- ZKsync theft
Timeline
- 2025-04-15 Breach occurred
- 2025-04-15 Publicly disclosed