Tools Crypto Exploit Tracker exploit-0119
Exploit record
ZKsync Airdrop Contract Exploit
- Loss
- $5M
- Attack vector
- Access Control
- Chain
- ZKsync
- Sector
- Airdrop
What happened
On April 15, 2025, a compromised admin wallet swept around $5M in unclaimed ZK tokens from an airdrop contract.
The exploit path was boring but effective: privileged function, wrong hands, real tokens gone. The ZK token price dropped sharply on the news before partially recovering.
On-chain references
Sources
- Halborn analysiswww.halborn.com/blog/post/explained-the-zksync-hack-april-20…
On YFarmX
- Our reportingZKsync Hack $5 Million in Controlled Return
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026