ZKsync, an Ethereum Layer 2 scaling protocol, disclosed a security breach involving a compromised admin account that resulted in the theft of approximately $5 million worth of unclaimed ZK tokens from its airdrop. The attacker gained control of the admin wallet and minted around 111 million ZK tokens, which were subsequently stolen. The incident caused the ZK token price to plunge as much as 20%, before partially recovering to about $0.046. ZKsync's security team, along with Beosin Trace and KYT, are actively monitoring and tracking the stolen funds. The project confirmed that user funds remain safe despite the breach. This event adds to recent concerns about security vulnerabilities in the cryptocurrency sector following other incidents such as the MANTRA turmoil. The hack involved unauthorized token minting through the compromised admin account.
📁 Project Name: The Roar (1ROR) 💵 Funds Lost: ~$780,000 (493.7 ETH) 💻 Type of Hack: Staking Contract Exploit https://t.co/rTml3q1gWb
After accessing an admin account, an attacker minted and stole approximately 111 million ZKsync tokens https://t.co/amI36gVTSD
📁 Project Name: ZKsync 💵 Funds Lost: ~$5 million 💻 Type of Hack: Admin Account Compromise / Unauthorized Token Minting https://t.co/HM5ob4QtlY