News Report Technology
April 24, 2025

ZKsync Security Council Recovers $5M In Stolen Tokens, Closes Case Following Hacker Cooperation

In Brief

ZKsync Security Council confirmed that the individual behind a recent $5 million token breach has returned the funds within the safe harbor period, leading to a resolution of the case.

ZKsync Security Council Recovers $5M In Stolen Tokens, Closes Case Following Hacker Cooperation

Governance authority overseeing the security framework of ZKsync, the ZKsync Security Council, conveyed that the individual involved in the recent security incident has cooperated and returned the compromised funds within the designated safe harbor timeframe. 

The Council emphasized that, in line with its earlier communication, the matter is now regarded as resolved. This resolution suggests a collaborative approach was taken, prioritizing the swift recovery of assets and system stability.

“The assets are now in the custody of the Security Council, and the decision on what will be done with the assets will be made by governance. The final investigation report is being prepared and will be published once completed,” it noted in a post on social media platform X.

The update follows efforts to establish communication with the individual responsible for a recent security breach that led to the unauthorized withdrawal of approximately $5 million in ZK tokens. Earlier in the week, the ZKsync Security Council had reached out through an on-chain message, proposing a 10% bounty incentive if the individual returned 90% of the exploited funds. The Council also assured that, should the conditions be met, the cooperation would be recognized and the matter concluded without pursuing additional measures. This approach highlights a strategy focused on recovery and resolution rather than prolonged confrontation.

ZKsync Confirms $5M Token Breach Via Compromised Admin Account, User Funds Unaffected

Last week, the ZKsync security team disclosed via social media that approximately $5 million worth of ZK tokens had been misappropriated due to a compromised administrative account. Reports indicated that the attacker accessed unclaimed tokens linked to a previous ZKsync airdrop. Despite the incident, the project reassured the community that user assets remained completely secure and were not affected at any point. Additionally, it was clarified that the core ZKsync protocol and the ZK token contract were not compromised, and no further tokens were at risk.

Following the breach, the market value of ZK tokens saw a drop of about 20%, a decline likely influenced by the sell-off of the stolen assets. ZKsync, a Layer 2 scaling solution for Ethereum developed by Matter Labs, had launched its token airdrop last year, distributing from a total supply of 21 billion tokens. While the airdrop expanded token access, it also drew criticism regarding its distribution model and challenges in preventing Sybil attacks, where individuals manipulate the system by creating multiple identities.

Disclaimer

In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.

About The Author

Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.

More articles
Alisa Davidson
Alisa Davidson

Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.

Shufti, Jumio, Sumsub, And Beyond: Top 6 Identity Verification And Compliance Platforms To Know In 2026

Shufti, Sumsub, Incode, Veriff, Persona and Jumio compared on compliance lifecycle coverage, pricing transparency and fraud detection ...

Know More

2026 AI Market Claims Vs SEC Fillings: Linkmate Analysis

Is the AI market really all just PR talk or there's a deeper math going on in ...

Know More
Read More
Read more
Meta Opens Muse Agent To DIY Hardware Builders With Open-Source Gadget SDKs
News Report Technology
Meta Opens Muse Agent To DIY Hardware Builders With Open-Source Gadget SDKs
October 5, 2026
CertiK’s ‘AI Security Workforce’ Report: Agentic AI Set To Reshape Cybersecurity, AML And Compliance
News Report Technology
CertiK’s ‘AI Security Workforce’ Report: Agentic AI Set To Reshape Cybersecurity, AML And Compliance
October 5, 2026
Hong Kong To Submit Bill This Year For Licensing Of Virtual Asset Trading And Custody
News Report Technology
Hong Kong To Submit Bill This Year For Licensing Of Virtual Asset Trading And Custody
October 5, 2026
Solana Foundation’s ‘Agentic Finance’ Report Identifies Autonomous Capital Management And Governance As Key To Institutional Adoption
News Report Technology
Solana Foundation’s ‘Agentic Finance’ Report Identifies Autonomous Capital Management And Governance As Key To Institutional Adoption
October 5, 2026