Leaderboard
314All-time rank
Z

ZKsync

Apr 15, 2025

$5.0M
Lost
$5.0M
Recovered
$0
Net loss
$5.0M
Unrecovered0% recovered

ZKsync airdrop contracts were compromised on April 15, 2025 when attacker obtained admin private key with inadequate key management. Attacker minted 111M ZK tokens ($5M) via sweepUnclaimed() function; core protocol and user funds remained unaffected.

Target
Other
Classification
Key Compromise
Technique
Private Key Compromised
Attribution
Unknown
Chains
zkSync Era

Event timeline

  1. Apr 15, 2025
    Exploit executed — $5.0M drained via private key compromised
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents