News Report Technology
April 24, 2025

ZKsync Security Council Recovers $5M In Stolen Tokens, Closes Case Following Hacker Cooperation

In Brief

ZKsync Security Council confirmed that the individual behind a recent $5 million token breach has returned the funds within the safe harbor period, leading to a resolution of the case.

ZKsync Security Council Recovers $5M In Stolen Tokens, Closes Case Following Hacker Cooperation

Governance authority overseeing the security framework of ZKsync, the ZKsync Security Council, conveyed that the individual involved in the recent security incident has cooperated and returned the compromised funds within the designated safe harbor timeframe. 

The Council emphasized that, in line with its earlier communication, the matter is now regarded as resolved. This resolution suggests a collaborative approach was taken, prioritizing the swift recovery of assets and system stability.

“The assets are now in the custody of the Security Council, and the decision on what will be done with the assets will be made by governance. The final investigation report is being prepared and will be published once completed,” it noted in a post on social media platform X.

The update follows efforts to establish communication with the individual responsible for a recent security breach that led to the unauthorized withdrawal of approximately $5 million in ZK tokens. Earlier in the week, the ZKsync Security Council had reached out through an on-chain message, proposing a 10% bounty incentive if the individual returned 90% of the exploited funds. The Council also assured that, should the conditions be met, the cooperation would be recognized and the matter concluded without pursuing additional measures. This approach highlights a strategy focused on recovery and resolution rather than prolonged confrontation.

ZKsync Confirms $5M Token Breach Via Compromised Admin Account, User Funds Unaffected

Last week, the ZKsync security team disclosed via social media that approximately $5 million worth of ZK tokens had been misappropriated due to a compromised administrative account. Reports indicated that the attacker accessed unclaimed tokens linked to a previous ZKsync airdrop. Despite the incident, the project reassured the community that user assets remained completely secure and were not affected at any point. Additionally, it was clarified that the core ZKsync protocol and the ZK token contract were not compromised, and no further tokens were at risk.

Following the breach, the market value of ZK tokens saw a drop of about 20%, a decline likely influenced by the sell-off of the stolen assets. ZKsync, a Layer 2 scaling solution for Ethereum developed by Matter Labs, had launched its token airdrop last year, distributing from a total supply of 21 billion tokens. While the airdrop expanded token access, it also drew criticism regarding its distribution model and challenges in preventing Sybil attacks, where individuals manipulate the system by creating multiple identities.

Disclaimer

In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.

About The Author

Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.

More articles
Alisa Davidson
Alisa Davidson

Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.

Hot Stories
Join Our Newsletter.
Latest News

Shufti, Jumio, Sumsub, And Beyond: Top 6 Identity Verification And Compliance Platforms To Know In 2026

Shufti, Sumsub, Incode, Veriff, Persona and Jumio compared on compliance lifecycle coverage, pricing transparency and fraud detection ...

Know More

2026 AI Market Claims Vs SEC Fillings: Linkmate Analysis

Is the AI market really all just PR talk or there's a deeper math going on in ...

Know More
Read More
Read more
Top 10 AI Tools Detecting Wash Trading And Market Abuse In 2026
Top Lists Technology
Top 10 AI Tools Detecting Wash Trading And Market Abuse In 2026
September 14, 2026
Top 10 AI Companies Developing Large Language Models For Crypto
Top Lists Technology
Top 10 AI Companies Developing Large Language Models For Crypto
September 14, 2026
Gate Update: 667% Spot Volume Growth, 37 US State Licenses, And A Full Week Of Launches
Digest News Report Technology
Gate Update: 667% Spot Volume Growth, 37 US State Licenses, And A Full Week Of Launches
September 14, 2026
Bitcoin’s Range-Bound Stalemate: Fading Sell Pressure Meets A Fed-Engineered Ceiling On Demand
Markets News Report Technology
Bitcoin’s Range-Bound Stalemate: Fading Sell Pressure Meets A Fed-Engineered Ceiling On Demand
September 14, 2026