Leaderboard
319All-time rank
Z
ZKSwap
Jul 9, 2025
$5.0M
Lost
$5.0M
Recovered
$0
Net loss
$5.0M
Unrecovered0% recovered
On July 9, 2025, ZKSwap's Ethereum Layer 1 bridge was exploited through its emergency withdrawal mechanism (Exodus Mode). The attacker exploited a critical flaw where the verifyExitProof() function failed to perform actual cryptographic verification of zero-knowledge proofs.
By forging withdrawal proofs, the attacker artificially inflated their balance and withdrew approximately $5 million in assets.
- Target
- Bridge
- Classification
- Bridge & Cross-Chain
- Technique
- Forged Proof
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jul 9, 2025Exploit executed — $5.0M drained via forged proof
- Attributed to Unknown
- Recovery status Unrecovered 0%