zkSync Hit by $5 Million Exploit, Exposing Layer-2 Vulnerabilities

zkSync, a prominent Ethereum Layer-2 scaling solution, has suffered a $5 million exploit, raising concerns about the security of privileged access systems in decentralized infrastructure.

According to reports circulating on X, the breach stemmed from a compromised admin wallet, enabling the attacker to mint 111 million unauthorized tokens.

The incident also involved a separate compromise of an airdrop account, which further contributed to the $5 million loss. While the exploit has not yet gone viral, the details point to persistent vulnerabilities in zkSync’s Layer-2 framework, underscoring the risks of centralized control points in otherwise decentralized systems.

This breach follows a string of high-profile DeFi exploits, including the recent $5 million 1inch hack in March 2025. zkSync has not yet issued an official statement, but the incident is likely to prompt scrutiny of its security practices and spark broader discussions about the resilience of Layer-2 solutions.

On-Chain Media will continue to monitor developments and provide updates as more information emerges.