最近的安全漏洞导致ZK价格大幅下降

最近的安全漏洞导致了ZK价格大幅下降，因为黑客设法从受损的管理员帐户中耗尽了价值500万美元的代币。

A recent security breach on ZKsync, a protocol focusing on rolling up transactions from several chains to reduce gas fees on the L1, has led to a significant drop in the ZK price. Hackers managed to drain $5 million worth of tokens from a compromised admin account, leading to a sharp decline in the value of the ZK token, which had been experiencing positive momentum since its launch in June 2024.

最近对ZKSYNC的安全性违反了，该协议的重点是从多个链中滚动交易以减少L1的汽油费，这导致ZK价格大幅下跌。黑客设法从折衷的行政帐户中耗尽了价值500万美元的代币，导致ZK代币的价值急剧下降，自2024年6月推出以来，ZK代币的价值一直在经历积极的势头。

The ZKsync security team confirmed on April 15 that an attacker had gained control of an admin account managing the airdrop contract. The hack involved the creation of roughly 111 million unclaimed ZK tokens, which were then embezzled. The attacker successfully utilized this vulnerability by invoking the sweepUnclaimed() function to create and transfer the unclaimed tokens.

ZKSYNC安全团队在4月15日证实，攻击者已控制了管理Airdrop合同的管理员帐户。该黑客涉及创建大约1.11亿个无人认领的ZK令牌，然后被挪用。攻击者通过调用SweepunClaimed（）函数来创建和传输无人认领的令牌，从而成功地利用了此漏洞。

The admin account exploited and controlled the airdrop counter, a contract that distributed ZK tokens to users. The minting transaction added approximately 0.45% of the total ZK token supply to the circulating supply of the tokens. The lost tokens were pegged at about $5 million. The attack only affected the airdrop distribution smart contracts; other contracts within the ZKsync protocol were not impacted.

Admin帐户利用并控制了Airdrop Counter，这是向用户分发ZK代币的合同。铸造交易将ZK代币总供应的约0.45％增加到令牌的循环供应中。丢失的令牌被固定在约500万美元。攻击只影响了Airdrop发行的智能合约； ZKSYNC方案中的其他合同受到影响。

The ZKsync team reassured users that no user funds were at risk during the attack. The protocol and the ZK token contract remained secure. In a post on X, the security team stated, “All user funds are safe and were never at risk,” adding that “necessary security measures” were being taken. They also emphasized that the incident was isolated and confined to the airdrop contract.

ZKSYNC团队向用户保证，在攻击期间，没有任何用户资金有危险。协议和ZK代币合同仍然安全。安全团队在X上的一篇文章中说：“所有用户资金都是安全的，从未受到威胁”，并补充说正在采取“必要的安全措施”。他们还强调，该事件是隔离的，并限于空投合同。

According to the team investigation, the compromised admin account’s address was identified, and the ZKsync team will work with organizations to recover the stolen funds. They also encourage the attacker to contact them for negotiations regarding the return of the stolen tokens. “We are coordinating the recovery efforts with @_seal_org and exchanges,” the team mentioned.

根据团队的调查，确定了受损的行政帐户的地址，ZKSYNC团队将与组织合作以收回被盗的资金。他们还鼓励攻击者与他们联系，以就被盗令牌的返回进行谈判。团队提到：“我们正在与@_seal_org和交流协调恢复工作。”

Following the crypto hack, ZK’s price dropped significantly, which is the second of the major crypto crashes witnessed this week. After the announcement, ZK’s price fell by around 20%, likely due to the hacker selling the stolen tokens on the market. By the time of the report, the price had recovered slightly but was still down about 12% from the intra-day high.

在加密黑客攻击之后，ZK的价格大大下降，这是本周主要的加密货币撞车事故中的第二起。宣布这一消息后，ZK的价格下跌了约20％，这可能是由于黑客出售了市场上被盗的令牌。到报告时期，价格略有恢复，但仍比日内高点下降了约12％。

This price drop directly responds to the increased circulation of tokens due to the hack. The influx of additional tokens into the market raised concerns among investors, contributing to the decline.

该价格下跌直接响应由于黑客攻击而增加的令牌循环。投入市场的其他代币涌入引起了投资者的关注，这导致了下降。

However, the ZKsync team’s assurance that no further vulnerabilities exist has calmed some fears, although the price has not fully recovered.

但是，尽管价格尚未完全恢复，但ZKSYNC团队保证没有进一步的漏洞使人们感到恐惧。

According to the Zsync team, the investigation into the incident is ongoing. A more detailed update will be shared once the team has completed its findings.

根据Zsync团队的说法，对事件的调查正在进行中。一旦团队完成发现后，将共享更详细的更新。

In addition, the ZKsync team is actively working with exchanges to help recover the stolen funds. They have also contacted the attacker to facilitate the return of the stolen tokens, warning that legal consequences could follow if the situation is not resolved.

此外，ZKSYNC团队正在积极进行交流，以帮助收回被盗的资金。他们还联系了攻击者，以促进被盗令牌的返回，警告说，如果情况无法解决，法律后果可能会随之而来。

While the attack’s immediate impact has temporarily dropped the price of ZK tokens, the team remains confident in the overall security of the ZKsync protocol. As the investigation progresses, further updates and details about the incident are expected.

尽管攻击的直接影响暂时下降了ZK代币的价格，但团队对ZKSYNC协议的整体安全仍然有信心。随着调查的进行，预计将进一步更新和有关该事件的详细信息。