ZKSync Hacker Returns $5M in Stolen Tokens After Accepting 10% Bounty
ZKsync confirmed the return of $5 million in tokens stolen during a recent admin wallet hack, marking the resolution of the incident. The hacker exploited the layer-2 blockchain’s admin wallet, making off with unclaimed tokens from the zksync airdrop.
After negotiations, the hacker cooperated, returning the funds within a predefined "safe harbor" window—a grace period designed to encourage voluntary restitution without legal repercussions. In exchange, the hacker retained a 10% bounty.
The recovered tokens are now under the custody of the ZKsync Security Council. A governance process will determine their redistribution. A final investigative report is underway and will be released upon completion.