Hacker steals $5M in ZK tokens by compromising ZKsync admin account

From Cointelegraph

April 15, 2025 5:39:00 pm:

A hacker breached ZKsync’s admin account on April 15, creating $5 million in unclaimed airdrop tokens. No user funds were affected. The attacker exploited a function to mint 111 million ZK tokens, increasing the supply by 0.45%. ZKsync is collaborating with SEAL for recovery efforts. ZK token dropped 7% in 24-hour trading.

ZKsync detailed the incident on April 15, revealing that the compromised account controlled three airdrop contracts. The attacker minted 111 million unclaimed ZK tokens, increasing the total supply by 0.45%. Recovery efforts are ongoing with SEAL. ZK token saw a 7% drop in 24-hour trading following the hack.

ZKsync, an Ethereum layer-2 protocol utilizing zero-knowledge rollups, had $57.3 million TVL as of April 15. The project was airdropping 17.5% of its token supply. ZK token price saw volatility post-hack, dropping 16% before rebounding to $0.047. Overall, $2 billion was lost to crypto hacks in Q1 2025, slightly less than 2024’s total losses.

Read more at Cointelegraph: Hacker mints $5M in ZK tokens after compromising ZKsync admin account