ZKsync Airdrop Exploit Leads to $5 Million Theft, Sparking Security Concerns in zk-Rollup Space

Ethereum layer 2 protocol ZKsync has confirmed a security breach that resulted in the theft of approximately $5 million worth of airdropped tokens. An administrator account compromise allowed an attacker to exploit the system and mint 111 million unclaimed ZK tokens, impacting the token distribution process within the rapidly growing zk-rollup space. The incident, which occurred following a vulnerability in the ZKsync airdrop contract, has ignited concerns about security protocols for token distribution initiatives.