{"id":23368,"date":"2025-04-24T11:39:19","date_gmt":"2025-04-24T08:39:19","guid":{"rendered":"https:\/\/forklog.com\/en\/zksync-reaches-agreement-with-hacker-for-return-of-5-million\/"},"modified":"2025-04-24T11:39:19","modified_gmt":"2025-04-24T08:39:19","slug":"zksync-reaches-agreement-with-hacker-for-return-of-5-million","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/zksync-reaches-agreement-with-hacker-for-return-of-5-million\/","title":{"rendered":"ZKsync Reaches Agreement with Hacker for Return of $5 Million"},"content":{"rendered":"<p>The perpetrator who stole ZK tokens valued at approximately $5 million from the ZKsync airdrop smart contract has returned the funds within the deadline set by the project&#8217;s team.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">We\u2019re pleased to share that the hacker has returned the funds within the safe harbor deadline. <a href=\"https:\/\/t.co\/RarXl1ALVv\">https:\/\/t.co\/RarXl1ALVv<\/a><\/p>\n<p>\u2014 ZKsync (\u220e, \u2206) (@zksync) <a href=\"https:\/\/twitter.com\/zksync\/status\/1915111545417224572?ref_src=twsrc%5Etfw\">April 23, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>On April 15, security experts from the L2 network <a href=\"https:\/\/forklog.com\/en\/news\/zksync-faces-plunge-after-5-million-token-theft\">identified<\/a> a compromise of an administrative account. Through this, the hacker intercepted unclaimed balances following the token distribution.<\/p>\n<p>On April 21, the ZKsync Security Council offered the hacker 72 hours to return the stolen assets, leaving 10% as a reward.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">A message from ZKsync Security Council to the Hacker:<\/p>\n<p>To resolve this matter amicably in the spirit of safe harbor, we are offering a 10% bounty for your cooperation if you return 90% of the funds involved in the exploit. Specifically:<\/p>\n<p>1\u20e3 Sending 44,687,278.5988 ZK tokens to\u2026<\/p>\n<p>\u2014 ZK Nation (@TheZKNation) <a href=\"https:\/\/twitter.com\/TheZKNation\/status\/1914338338804244511?ref_src=twsrc%5Etfw\">April 21, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\u00a0<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cIf the funds are not returned by the deadline, the matter will be referred to law enforcement for a full-scale criminal investigation,\u201d the statement said.<\/p>\n<\/blockquote>\n<p>On April 23, approximately 1021 ETH and 44.7 million ZK were sent to the address specified by the Council. The value of the assets at the time of writing is about $4.25 million.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cAs stated in the initial message from the Security Council, the matter is now considered closed,\u201d confirmed ZKsync.<\/p>\n<\/blockquote>\n<p>Following the breach, ZK prices plummeted to $0.04. Subsequently, the price recovered to $0.058. Over the past 24 hours, the rate has fallen by 2.7% amid a 3.5% correction in the overall market capitalization (<a href=\"https:\/\/www.coingecko.com\/\">CoinGecko<\/a>). The ZKsync token is trading around $0.055.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"620\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/ZKUSDT_2025-04-24_11-16-35-1024x620.png\" alt=\"ZKUSDT_2025-04-24_11-16-35\" class=\"wp-image-257441\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/ZKUSDT_2025-04-24_11-16-35-1024x620.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/ZKUSDT_2025-04-24_11-16-35-300x182.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/ZKUSDT_2025-04-24_11-16-35-768x465.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/ZKUSDT_2025-04-24_11-16-35.png 1327w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Hourly chart of ZK\/USDT on Binance. Data: <a href=\"https:\/\/ru.tradingview.com\/symbols\/ZKUSDT\/\">TradingView<\/a>.<\/figcaption><\/figure>\n<p>Back in June 2024, the project <a href=\"https:\/\/forklog.com\/en\/news\/zksync-to-distribute-3-6-billion-zk-tokens-in-airdrop\">conducted an airdrop<\/a> of 3.6 billion ZK. Following the large-scale distribution, key metrics of ZKsync <a href=\"https:\/\/forklog.com\/en\/news\/zksync-metrics-decline-following-airdrop\">significantly declined<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The perpetrator who stole ZK tokens valued at approximately $5 million from the ZKsync airdrop smart contract has returned the funds within the deadline set by the project&#8217;s team. We\u2019re pleased to share that the hacker has returned the funds within the safe harbor deadline. https:\/\/t.co\/RarXl1ALVv \u2014 ZKsync (\u220e, \u2206) (@zksync) April 23, 2025 On [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":23367,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1179,1518],"class_list":["post-23368","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-layer-2-solutions","tag-zksync"],"aioseo_notices":[],"amp_enabled":true,"views":"157","promo_type":"","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/23368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=23368"}],"version-history":[{"count":0,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/23368\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/23367"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=23368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=23368"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=23368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}