ZK Token suffers 17% crash in wake of $5 million airdrop exploit 

The breach allowed the attacker to gain control of approximately $5 million worth of unclaimed tokens from ZKSync’s airdrop contract, prompting widespread concern among investors.

ZKSync confirmed that the breach stemmed from compromised admin credentials tied to the contract managing leftover airdrop allocations.

In a statement posted on X (formerly Twitter), ZKSync assured users that this isolated incident affected only unclaimed tokens and did not compromise user funds or the core protocol.

“This is an isolated incident caused by a compromised key and confined to the ZK Token airdrop contract,” the security team explained, adding that a detailed investigation is ongoing, with a full incident report promised soon.

Despite these reassurances, the exploit triggered a sharp sell-off in the ZK token market.

Prices dropped by 15-20% shortly after 13:50, according to CoinMarketCap data. However, the token has partially recovered, recording an 11% loss on the day.

The breach sent shockwaves across the cryptocurrency community, with analysts pointing to the critical vulnerabilities in centralized management of token allocations.

ZKSync emphasized that the protocol and the ZK token contract remain secure, and no further tokens are at risk. However, the incident underscores the need for stringent security measures to safeguard funds within decentralized systems.

“All user funds are safe and have never been at risk. The ZKsync protocol and ZK token contract remained secure, and no further ZK is at risk. 

 “This is an isolated incident caused by a compromised key and confined to the ZK Token airdrop contract.” 

The ZK token was initially launched in June 2024 as part of a highly anticipated airdrop, aimed at rewarding early adopters.

As ZKSync works to rebuild trust and address vulnerabilities, the broader community will be watching closely for transparency in the investigation and subsequent steps taken by the team.