A hacker who exploited ZKsync’s airdrop contract vulnerability on April 15 has returned nearly $5.7 million in stolen tokens after accepting a 10% bounty. The vulnerability came from a compromised administrative address that allowed the attacker to call the sweepUnclaimed() function in the contract, enabling them to mint approximately 111 million unclaimed ZK tokens. The […]