A compromised administration account connected to ZKSYNC air contracts has executed a transaction which struck approximately $ 5 million in ZK tokens, stealing the remaining non -claimed allowance of the network’s first distribution of the network.
The attacker operated a function to demand the tokens on April 15 and issued around 111 million ZK tokens, equivalent to around 0.45% of the total offer of protocol tokens.
According to affirmations Shared by ZKSYNC on X, the feat was confined to the Ardrop distribution contracts. He did not affect the ZKSYNC protocol, the ZK token contract, the governance infrastructure or any other capped miteur associated with the tokens program.
The protocol stressed that user funds were never at risk and described the incident as isolated, resulting from a private compromise key controlling the assigned administration account.
The attacker has already exchanged $ 3.5 million from ZK tokens stolen in Ethereum (ETH), as Channel data underline.
The ZKSYNC team said the recovery efforts were underway in coordination with exchanges and the SEAL 911 blockchain security company. The team also made a public appeal for the attacker to contact them to negotiate a return from funds and avoid legal consequences.
According to the team’s medico-legal survey, operating it can no longer strike the shot using the same method. The incident did not have an impact on operations at the level of the protocol or the security of current governance activities.
Once the internal exams and the recovery actions end, the project will publish a complete post-mortem.
ZK token tank
According to cryptoslate data, the ZK token dropped 8.6% in the past 24 hours and is negotiated at $ 0.04513.
Since the launch, the token has lost almost 90% of its value, a fact raised by the members of the community following the feat.
In response, Matter Labs CEO Alex Gluchowski tackled concerns on social media and have declared that withdrawal is comparable to Ethereum and other layers of layer 2 in the middle of the Wider market correction.
Gluchowski said:
“ETH and all the other L2 are considerably declining their ATHS. Nevertheless, the laboratories myself and Matter are as engaged as ever in the mission and success of Zksync. I also see very optimistic signs of the new management of the Ethereum Foundation. ”
Gluchowski added that he Continue to respond to public requests About the incident while the investigation remains active. Zksync reiterated that they would share a technical update once they have completed a continuous security analysis.
Although limited in the scope, the unauthorized strike temporarily inflated the supply in circulation and caused an increased examination of key management practices in the deployments of smart contracts in Zksync.