ZKsync, a blockchain project maintained by Matter Labs, successfully recovered nearly $5.7 million in stolen ZK tokens following a hack that exploited an airdrop contract vulnerability on April 15, 2025. The hacker cooperated with the ZKsync Association, returning the funds within the safe harbor deadline and accepting a 10% bounty as a reward. Matter Labs, which operates as the sole sequencer for the ZKsync Era chain, intervened by restricting 70% of the stolen tokens from further transfer, aiding in the recovery process. The ZKsync Association, the ZKsync Foundation, and Matter Labs have concluded their investigation and published a final report, expressing gratitude to their technical partners, security experts, exchanges, and the community for their support during the incident.
The investigation into the recent exploit has concluded and the final report has been published on the ZKsync blog. The ZKsync Association, the ZKsync Foundation, and Matter Labs are thankful to our technical partners, security experts, exchanges, and the ZKsync community for
🚨 CMC News: A hacker who exploited ZKsync’s airdrop contract vulnerability on April 15 has returned nearly $5.7 million in stolen tokens after accepting a 10% bounty. https://t.co/CSahX4AMPR
LATEST: @zksync achieves impossible feat of recovering over $5M with bounty hack! Listen for more details... https://t.co/5fldUtgks7