How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Incident Report: Compromised admin key to unclaimed airdrop tokens

calendar_today April 25, 2025 person zksync@newsletter.paragraph.com (ZKsync) domain zksync

Incident SummaryOn April 13th, a compromised admin account minted the remaining unclaimed tokens from the ZK token Merkle distributors used for the ZKsync June 17th 2024 airdrop. The hacker successfully took control of 111,881,122 ZK tokens (equivalent to ~$5M at the moment of the initial transaction). The transaction can be viewed here.

open_in_new Read original post