Odaily星球日报讯 据 Cyvers Alerts 监测，ZKsync 攻击者访问了约 500 万美元未认领的 ZK 代币。目前已有约 170 万枚 ZK 跨链至以太坊，并连同 10 枚 ETH 一起被转入 HitBTC 相关地址，疑似开始套现操作。

Odaily星球日报讯 据 Cyvers Alerts 监测，ZKsync 攻击者访问了约 500 万美元未认领的 ZK 代币。目前已有约 170 万枚 ZK 跨链至以太坊，并连同 10 枚 ETH 一起被转入 HitBTC 相关地址，疑似开始套现操作。

ZKsync攻击者已跨链转出约170万枚ZK代币，疑似开始套现操作

<Odaily> Planet Daily News: According to Cyvers Alerts monitoring, the ZKsync attacker accessed approximately $5 million in unclaimed ZK tokens. Currently, about 1.7 million ZK tokens have been cross-chained to Ethereum and transferred to a HitBTC-related address along with 10 ETH, seemingly initiating a cash-out operation.

The ZKsync attacker has transferred about 1.7 million ZK tokens across the chain, and it is suspected that he has begun cashing out.

According to Foresight News, ZKsync has stated that its security team has confirmed that a stolen administrator account has stolen approximately $5 million worth of ZK Tokens (i.e., the remaining unclaimed tokens from the ZKsync airdrop). They are taking necessary security measures. All user funds are safe and not facing any risks. The ZKsync protocol and ZK Token contract are secure, and ZK is no longer facing any risks.

This is an isolated incident caused by key leakage and is limited to the ZK Token airdrop contract. The investigation is ongoing, and detailed updates will be published later today.

ZKsync: Confirmed that the airdrop administrator account was stolen, resulting in the theft of $5 million in ZK tokens, and user funds are safe

<Odaily> Planet Daily News: According to Paidun monitoring, the address marked as a Zoth attacker has transferred 400 ETH (approximately $650,000) to a new address.

Zoth attacker transfers 400 ETH to new address

<PANews> On April 15th, according to an official update from ZKsync, an investigation revealed that the administrator address (0x8428…587D) of the airdrop contract was compromised. The attacker called the sweepUnclaimed() function and illegally minted approximately 111 million ZK tokens from three airdrop contracts, representing about 0.45% of the total supply. The incident was limited to the airdrop distribution contract, and the ZKsync protocol, token contract, governance contract, and authorized minting parties were not affected. Currently, most of the funds remain in the attacker's address, and the team is coordinating with <SEAL> organization and exchanges to track and encourage the attacker to return the funds.