ZKsync updates security incident progress: Investigation is still ongoing, efforts are being made to achieve decentralized sorting and recover funds

Odaily Planet Daily News: ZKsync has published an update on the security incident progress on the X platform, stating that the incident was caused by the theft of the airdrop management key, which is included in three specific Merkle distribution contracts for the ZK token issuance in June 2024. Due to the fact that the total issuance limit of each distribution contract has been fully minted, it is not possible to mint additional ZK tokens from any distribution contract. No further attacks can be carried out through this method. The stolen management key cannot control any other contracts and cannot perform any other operations except for minting unclaimed tokens from the airdrop after the redemption window period ends. Matter Labs is currently the only sorter for the ZKsync Era chain, and is unable to handle all potential events involving a single smart contract. They are working to upgrade ZKsync to the first phase and implement decentralized sorting, while ZKsync Era is currently in the first phase Rollup state. It should be emphasized that the ZKsync governance and security committee has the authority to replace sorters and remove all filters at any time. The investigation is still ongoing and efforts are being made actively to recover the funds.