ZKsync Hacker Accepts Bounty, Returns Nearly $5M in Stolen Crypto

A hacker who drained nearly $5 million from Ethereum scaling protocol ZKsync’s airdrop contract has returned the stolen funds within the project’s 72-hour deadline, closing the chapter on the recent exploit.“We’re pleased to share that the hacker has cooperated and returned the funds within the safe harbor deadline,” ZKsync The recovered assets, consisting of over 44.6 million ZK tokens and nearly 1,800 ETH, are now under the The deal follows an exploit that took place earlier this week, targeting a The attacker then transferred the funds across both “All user funds are safe and have never been at risk,” ZKsync said in a Tuesday post. “The ZKsync protocol and ZK token contract remained secure.”The protocol responded later by issuing an on-chain message offering the attacker a 10% bounty if 90% of the funds were returned within 72 hours. If the offer was ignored, ZKsync warned the hacker that the case would be escalated to law enforcement to pursue a “full criminal investigation.”The ZK token’s price briefly plunged to $0.04 after the exploit but has since stabilized near $0.05, down 2.6% over the last 24 hours, according to CoinGecko Following the return of the stolen funds, ZKsync said that a final investigation report is in the works and will be published once complete.The incident is the latest in a string of attacks plaguing the crypto sector this year. According to blockchain security firm Immunefi, A separate Much of this total was driven by the catastrophic Private key compromises continued to dominate as a critical threat vector, responsible for $142.3 million in losses across just 15 incidents. Alarmingly, only 0.38% of stolen funds were recovered this quarter, down from over 42% in the previous quarter. In February alone, not a single dollar was returned, the report said.Meanwhile, Ethereum remained the most targeted, suffering nearly $1.54 billion in theft across 98 incidents. Edited by