111 Million Tokens Stolen in ZKsync Admin Wallet Breach, Market Plunges

A major security breach has impacted the ZKsync ecosystem, resulting in the theft of 111 million tokens and a significant decline in market value. On April 15, 2025, it was reported that an administrator wallet responsible for airdrop distribution was compromised, leading to the minting of these unclaimed tokens. This incident has shaken investor confidence in ZKsync’s security protocols and market stability, as evidenced by a drop in the token price and increased volatility within the crypto space. While no core protocol functionality was affected, the incident highlighted the vulnerability of centralized control points within decentralized systems. 111 million additional tokens were minted following the breach, causing an immediate 11-17% decrease in ZK’s market value, according to reports from CoinMarketCap. The attack targeted three airdrop distribution contracts, prompting immediate action by the community and discussions with potential collaborators for funds recovery. The security incident was limited to the airdrop contract. Experts have drawn parallels to similar vulnerabilities observed in other Layer-2 protocols such as Velocore which experienced a breach last year impacting $6.8 million in assets.