Hackers Hijack ZKsync and Matter Labs X Accounts, Spreading Fake SEC Warnings
On May 13, hackers took control of ZKsync and Matter Labs’ official X accounts. They spread false SEC warnings and promoted a phishing airdrop. The team regained control and deleted malicious tweets. However, a developer account later warned users not to interact, raising doubts about the recovery.
The hackers initially claimed ZKsync was under SEC investigation, causing panic. They then promoted a fake ZK token airdrop with a phishing link. The team quickly removed the posts, but the damage was done. ZK token prices fell over 5%, trading around $0.07.
Market experts, like Harrison Leggio of g8keep, believe the attack aimed to crash ZKsync’s token price. It’s unclear how many users clicked the phishing link, and zksync hasn’t confirmed any losses.
This incident comes less then a month after another security breach. On April 15, an attacker exploited admin access to mint 111 million ZK tokens, worth $5 million. They returned 90%, keeping 10% as a bounty.
These back-to-back breaches raise questions about ZKsync’s internal security. The team is investigating the latest hack, focusing on compromised delegated accounts. Users are advised to stay vigilant and avoid suspicious links.