Hack history / 2025 / Hack or exploit
ZKsync
Hack or exploit on Apr 15, 2025 · Private Key Compromised
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$5M
dollars at the time
Returned
$4.5M
90% of the loss, as a source states it
Rank
#446
among thefts by dollars lost
What happened
ZKsync airdrop contracts were compromised on April 15, 2025 when attacker obtained admin private key with inadequate key management. Attacker minted 111M ZK tokens ($5M) via sweepUnclaimed() function; core protocol and user funds remained unaffected.
Details
- Date
- Apr 15, 2025
- Kind
- Hack or exploit
- Method
- Private Key Compromised
- How in
- Keys, accounts and infrastructure
- Target
- Other
- Chains
- zkSync Era, Ethereum
After the theft
- Returned by the attacker
- yes, amount not stated
“On Wednesday, April 23rd at 14:39 UTC, 90% of the funds were returned to the Era and Ethereum L1 addresses controlled by the Security Council.” (SlowMist Hacked) - Recovered or frozen
- $4.5M
“$5.0M taken, $500K after recovery or freezing” (Web3 Is Going Great)
Related incidents
ZKsync 2025 · Hack or exploit · undisclosed
Venus_ZKSync 2025 · Hack or exploit · $200K
ZKsync Ignite 2025 · Hack or exploit · undisclosed
ZkSync 2024 · Hack or exploit · undisclosed
zkSync 2023 · Hack or exploit · undisclosed
Venus_ZKSync 2025 · Hack or exploit · $200K
ZKsync Ignite 2025 · Hack or exploit · undisclosed
ZkSync 2024 · Hack or exploit · undisclosed
zkSync 2023 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "ZKsync hack, Apr 15, 2025: $5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht59a6f3c9fe/ (data as of 2026-10-31).