Zksync从4月15日的安全事件开始，收回了价值500万美元的被盗令牌

ZKSYNC协会已确认从4月15日的安全事件中涉及Airdrop发行合同的安全事件中回收了价值500万美元的被盗令牌。

The ZKsync Association has confirmed the recovery of $5 million worth of tokens stolen from an April 15 ZKsync security incident.

ZKSYNC协会已确认从4月15日ZKSYNC安全事件中偷走了价值500万美元的代币。

The hacker agreed to accept a 10% bounty and return 90% of the remaining stolen tokens, transferring the ZKsync Security Council almost $5.7 million across three transfers on April 23.

黑客同意接受10％的赏金，并返回剩下的被盗代币的90％，在4月23日转移了ZKSYNC安全理事会将近570万美元。

“We’re pleased to share that the hacker has cooperated and returned the funds within the safe harbor deadline,” ZKsync Association posted to X on April 23, which was later reposted by ZKsync’s X account.

Zksync协会于4月23日发布给X，后来由ZKSYNC的X帐户重新发布。

Matter Labs, the company behind the ZKsync protocol, also reposted the news shared on X.

ZKSYNC协议背后的公司Matter Labs也重新发布了X上共享的新闻。

The ZKsync X account previously confirmed that no user funds were compromised.

ZKSYNC X帐户先前证实没有任何用户资金受到损害。

The hacker sent two transfers on the ZKsync Era blockchain, consisting of $2.47 million worth of ZKsync (ZK, न्यू टोकन इन्क्रिप્શન સ્ટોક સમીક્ષા) tokens and $1.83 million worth of Ether (ETH) to the ZKsync Security Council’s ZKsync Era address.

这位黑客在Zksync ERA区块链上发送了两次转移，其中包括价值247万美元的Zksync（Zk，Zk，ननयूिप્શનिप્શનસ્ટોકસ્ટોકસ્ટોકસ્ટોક）和价值183万美元的Ether（ETH），Ether（ETH）到ZKSYNC Sepply Commission的Zksync Zksync ERA地址。

Another 776 ETH — worth nearly $1.4 million — was also sent to their security council’s Ethereum address, Etherscan data shows.

Etherscan数据显示，另外776 ETH（价值近140万美元）也被发送到其安全理事会的以太坊地址。

The first transfer was made on April 23 at 2:39:57 pm UTC and the last transfer was made roughly 13 minutes later — all within the 72-hour window that ZK Sync had initially set.

第一次转会是在4月23日下午2:39:57进行的，最后一次转会大约在13分钟后进行 - 全部在ZK Sync最初设定的72小时窗口内。

ZKsync Association said the company would publish a final report revealing more details from the security incident.

ZKSYNC协会表示，该公司将发布一份最终报告，揭示安全事件中的更多详细信息。

How the hack happened

黑客如何发生

The hacker breached ZKsync’s admin account, allowing them to exploit the airdrop distribution contract's sweepUnclaimed() function to mint 111 million unclaimed ZK tokens, which were valued at approximately $5 million at the time of the April 15 attack.

黑客违反了ZKSYNC的管理帐户，使他们能够利用Airdrop Distribution合同的SweepunClaimed（）功能为MINT 1.11亿个无人认领的ZK令牌，在4月15日攻击时，该功能的价值约为500万美元。

The hack occurred while ZKsync was in the process of airdropping 17.5% of ZK’s token supply to ecosystem participants.

hack发生在ZKSYNC处于ZK供应生态系统参与者的供应量的17.5％的过程中。

The recovered amount — almost $5.7 million — exceeded the $5 million originally stolen due to a rise in the market value of the stolen tokens, with ZK and ETH increasing 16.6% and 8.8% since the April 15 attack, according to CoinGecko data.

根据Coingecko的数据，回收金的额度（将近570万美元）超过了500万美元的盗窃，这是由于被盗令牌的市场价值上升，自4月15日袭击以来，ZK和ETH增长了16.6％和8.8％。

Despite the asset recovery, the ZK token failed to rise substantially on the news and is currently down 0.2% over the last 24 hours.

尽管有资产恢复，但ZK代币仍未在新闻上大幅上升，目前在过去24小时内下降了0.2％。

ZKsync Era is an Ethereum layer 2 solution that uses zero-knowledge rollups to batch and process transactions offchain. It has nearly $59 million in total value locked on its chain and has over $2 billion in real-world assets onchain, according to DefiLlama and RWA.xyz.

Zksync ERA是一种以太坊2层解决方案，它使用零知识汇总来批处理和处理交易的脱胸。根据Defillama和RWA.XYZ的数据，它的链条上有近5900万美元的总价值锁定在其连锁店，现实世界中的资产超过20亿美元。