ZKsync: The administrator accounts of three airdrop distribution contracts were hacked, and the attacker minted approximately 111 million ZK tokens
ChainCatcher message, ZKsync posted on platform X stating that, after investigation, the administrator accounts of three airdrop distribution contracts have been compromised. The attacker invoked the sweepUnclaimed() function, minting approximately 111 million unclaimed ZK tokens from the airdrop contract. This incident only involves the airdrop distribution contracts, and all mintable funds have been fully minted, making further exploitation through this method impossible.The ZKsync protocol, ZK token contracts, all three governance contracts, and all active token cap minters have not been affected by this incident and will not be affected. They are currently coordinating with exchanges to restore operations and recommend that the attacker return the funds to avoid legal consequences.