The ZKsync team reported a compromised admin account that led to the theft of $5 million in unclaimed tokens. Users can rest assured about their funds.
Detection of the Hack
On April 15, the ZKsync team identified a compromised admin account controlling about $5 million worth of unclaimed ZK tokens. According to them, no user funds have been at risk.
Situation Explanation
Reports indicate that the attacker used a compromised key to mint approximately 111 million unclaimed ZK tokens, inflating the total token supply. However, ZKsync management confirmed the incident was confined to the airdrop distribution contracts.
Response to the Incident
ZKsync co-founder Alex Gluchowski stated that the team is actively investigating the incident and working on recovering the funds. He added that the perpetrator could face criminal liability.
The incident with ZKsync highlights the importance of security in cryptocurrency projects. While users can maintain their peace of mind, the team continues its investigation and recovery efforts regarding the stolen funds.