PANews reported on April 15 that according to the official ZKsync report, the security team discovered that an administrator account of the airdrop contract was leaked, and the attacker controlled and sold about $5 million of unclaimed ZK airdrop tokens. The incident was caused by a single key leak, which did not affect the protocol itself and the ZK token contract, and user funds are always safe. The official investigation is ongoing and a detailed report will be released later.