Odaily News ZKsync published an update on the security incident on the X platform, stating that this incident was caused by the theft of the airdrop management key, which was contained in three specific Merkle distribution contracts for the ZK token issuance in June 2024. Since the total issuance limit of each distribution contract has been fully minted, additional ZK tokens cannot be minted from any distribution contract. No further attacks can be carried out through this method. The stolen management key cannot control any other contracts and cannot perform any other operations except minting unclaimed tokens from the airdrop after the claim window period ends.
Matter Labs is currently the only sorter for the ZKsync Era chain. Matter Labs is unable to deal with all potential incidents involving a single smart contract and is working to upgrade ZKsync to Phase 1 and achieve decentralized sorting. ZKsync Era is currently in Phase 1 Rollup state. It should be emphasized that the ZKsync Governance and Security Committee has the right to replace the sorter and remove all filters at any time. The investigation is still ongoing and efforts are being actively made to recover funds.