Zksync從4月15日的安全事件開始，收回了價值500萬美元的被盜令牌

ZKSYNC協會已確認從4月15日的安全事件中涉及Airdrop發行合同的安全事件中回收了價值500萬美元的被盜令牌。

The ZKsync Association has confirmed the recovery of $5 million worth of tokens stolen from an April 15 ZKsync security incident.

ZKSYNC協會已確認從4月15日ZKSYNC安全事件中偷走了價值500萬美元的代幣。

The hacker agreed to accept a 10% bounty and return 90% of the remaining stolen tokens, transferring the ZKsync Security Council almost $5.7 million across three transfers on April 23.

黑客同意接受10％的賞金，並返回剩下的被盜代幣的90％，在4月23日轉移了ZKSYNC安全理事會將近570萬美元。

“We’re pleased to share that the hacker has cooperated and returned the funds within the safe harbor deadline,” ZKsync Association posted to X on April 23, which was later reposted by ZKsync’s X account.

Zksync協會於4月23日發布給X，後來由ZKSYNC的X帳戶重新發布。

Matter Labs, the company behind the ZKsync protocol, also reposted the news shared on X.

ZKSYNC協議背後的公司Matter Labs也重新發布了X上共享的新聞。

The ZKsync X account previously confirmed that no user funds were compromised.

ZKSYNC X帳戶先前證實沒有任何用戶資金受到損害。

The hacker sent two transfers on the ZKsync Era blockchain, consisting of $2.47 million worth of ZKsync (ZK, न्यू टोकन इन्क्रिप્શન સ્ટોક સમીક્ષા) tokens and $1.83 million worth of Ether (ETH) to the ZKsync Security Council’s ZKsync Era address.

這位黑客在Zksync ERA區塊鏈上發送了兩次轉移，其中包括價值247萬美元的Zksync（Zk，Zk，ननयूिप્શનिप્શનસ્ટોકસ્ટોકસ્ટોકસ્ટોક）和價值183萬美元的Ether（ETH），Ether（ETH）到ZKSYNC Sepply Commission的Zksync Zksync ERA地址。

Another 776 ETH — worth nearly $1.4 million — was also sent to their security council’s Ethereum address, Etherscan data shows.

Etherscan數據顯示，另外776 ETH（價值近140萬美元）也被發送到其安全理事會的以太坊地址。

The first transfer was made on April 23 at 2:39:57 pm UTC and the last transfer was made roughly 13 minutes later — all within the 72-hour window that ZK Sync had initially set.

第一次轉會是在4月23日下午2:39:57進行的，最後一次轉會大約在13分鐘後進行 - 全部在ZK Sync最初設定的72小時窗口內。

ZKsync Association said the company would publish a final report revealing more details from the security incident.

ZKSYNC協會表示，該公司將發布一份最終報告，揭示安全事件中的更多詳細信息。

How the hack happened

黑客如何發生

The hacker breached ZKsync’s admin account, allowing them to exploit the airdrop distribution contract's sweepUnclaimed() function to mint 111 million unclaimed ZK tokens, which were valued at approximately $5 million at the time of the April 15 attack.

黑客違反了ZKSYNC的管理帳戶，使他們能夠利用Airdrop Distribution合同的SweepunClaimed（）功能為MINT 1.11億個無人認領的ZK令牌，在4月15日攻擊時，該功能的價值約為500萬美元。

The hack occurred while ZKsync was in the process of airdropping 17.5% of ZK’s token supply to ecosystem participants.

hack發生在ZKSYNC處於ZK供應生態系統參與者的供應量的17.5％的過程中。

The recovered amount — almost $5.7 million — exceeded the $5 million originally stolen due to a rise in the market value of the stolen tokens, with ZK and ETH increasing 16.6% and 8.8% since the April 15 attack, according to CoinGecko data.

根據Coingecko的數據，回收金的額度（將近570萬美元）超過了500萬美元的盜竊，這是由於被盜令牌的市場價值上升，自4月15日襲擊以來，ZK和ETH增長了16.6％和8.8％。

Despite the asset recovery, the ZK token failed to rise substantially on the news and is currently down 0.2% over the last 24 hours.

儘管有資產恢復，但ZK代幣仍未在新聞上大幅上升，目前在過去24小時內下降了0.2％。

ZKsync Era is an Ethereum layer 2 solution that uses zero-knowledge rollups to batch and process transactions offchain. It has nearly $59 million in total value locked on its chain and has over $2 billion in real-world assets onchain, according to DefiLlama and RWA.xyz.

Zksync ERA是一種以太坊2層解決方案，它使用零知識匯總來批處理和處理交易的脫胸。根據Defillama和RWA.XYZ的數據，它的鏈條上有近5900萬美元的總價值鎖定在其連鎖店，現實世界中的資產超過20億美元。