ZKsync Suffers $5M Security Breach: Admin Account Compromised in Token Theft

In a significant security incident, ZKsync has reportedly lost tokens valued at approximately $5 million due to unauthorized access to an administrative account. The breach highlights ongoing vulnerabilities in crypto project management, particularly around privileged access controls. Industry analysts are urging protocols to implement stricter multi-signature safeguards and real-time monitoring for high-value wallets. The ZKsync team has yet to release an official post-mortem, but blockchain forensic firms are tracing the stolen funds across decentralized exchanges. This incident follows a troubling pattern of Layer 2 protocol exploits in Q2 2025, raising concerns about institutional adoption timelines.

Some X users have accused the ZK breach of being an inside job (without showing evidence), while others have alleged that the ZK token is a scam in its entirety. Blockworks has reached out to ZKsync for comment, but did not receive a response by press time.

ZK’s price fell shortly after 6:30 am PT, right before the team’s first post about the breach at 6:49 am PT.

The token hit an all-time low of $0.041 on Tuesday.

By Wednesday morning, ZK’s price was up roughly 5% in the past 24 hours, but remains down 30% in the past month, per CoinGecko data.

• Blockworks Daily: Unpacking crypto and the markets.
• Empire: Crypto news and analysis to start your day.
• Forward Guidance: The intersection of crypto, macro and policy.
• 0xResearch: Alpha directly in your inbox.
• Lightspeed: All things Solana.
• The Drop: Apps, games, memes and more.
• Supply Shock: Bitcoin, bitcoin, bitcoin.