ZKSync Hack: Airdrop of 111 Million ZK Tokens to the Attacker's Account

BlockBeats News, April 15th: ZKsync has released an update regarding the recent hack incident. "The investigation has revealed that the administrator account responsible for managing three airdrop distribution contracts has been compromised. The compromised account's address is: 0x842822c797049269A3c29464221995C56da5587D. The attacker called the sweepUnclaimed() function, minting approximately 111 million unclaimed ZK tokens from the airdrop contract."

This transaction has increased the circulating token supply by about 0.45%. This incident is limited to the airdrop distribution contract, and all mintable funds have been minted. No further attacks can be conducted through this method. The ZKsync protocol, ZK token contract, all three governance contracts, and all active token plan cap minters were not affected by this incident and will not be impacted.

The attacker's account holding the majority of the funds is as follows: 0xb1027ed67f89c9f588e097f70807163fec1005d3. We are coordinating recovery efforts with the Security Alliance and exchanges. We encourage the attacker to contact us via email to negotiate the return of the funds to avoid legal consequences."