According to Foresight News, ZKsync announced that its security team has confirmed a stolen administrator account has stolen approximately $5 million worth of ZK Tokens (the remaining unclaimed tokens from the ZKsync airdrop). They are taking necessary security measures. All user funds are safe and not facing any risks. The ZKsync protocol and ZK Token contract are secure, and ZK is no longer facing any risks.
This is an isolated incident caused by key leakage and is limited to the ZK Token airdrop contract. The investigation is ongoing, and detailed updates will be published later today.