{"id":20359,"date":"2025-05-13T01:53:46","date_gmt":"2025-05-13T01:53:46","guid":{"rendered":"https:\/\/gold.creditcard\/zksync-x-hacker-posts-false-sec-probe-in-apparent-effort-to-crash-token\/"},"modified":"2025-05-13T01:53:46","modified_gmt":"2025-05-13T01:53:46","slug":"zksync-x-hacker-posts-false-sec-probe-in-apparent-effort-to-crash-token","status":"publish","type":"post","link":"https:\/\/gold.creditcard\/es\/zksync-x-hacker-posts-false-sec-probe-in-apparent-effort-to-crash-token\/","title":{"rendered":"ZKsync X hacker posts false SEC probe in apparent effort to crash token"},"content":{"rendered":"<p>The X account of the Ethereum layer 2 network ZKsync and its developer Matter Labs were compromised early on May 13, with hackers falsely claiming the network was being probed by US authorities, among other scam messages. <\/p>\n<p>A ZKsync-related X account <a href=\"https:\/\/x.com\/zkSyncDevs\/status\/1922085897509732721\" target=\"_blank\" title=\"https:\/\/x.com\/zkSyncDevs\/status\/1922085897509732721\">posted<\/a> on May 13, confirming the accounts for ZKsync and Matter Labs were compromised, warning users not to interact after the accounts shared links to a fake airdrop in an apparent phishing scam.<\/p>\n<p><em>Other X users had warned the ZKsync X account was compromised. Source: <\/em><a href=\"https:\/\/x.com\/pseudotheos\/status\/1922078376539390213\" target=\"_blank\" title=\"https:\/\/x.com\/pseudotheos\/status\/1922078376539390213\"><em>pseudo<\/em><\/a><\/p>\n<p>The hacked ZKsync and Matter Labs then <a href=\"https:\/\/x.com\/zksync\/status\/1922088665762730402\" target=\"_blank\" title=\"https:\/\/x.com\/zksync\/status\/1922088665762730402\">both<\/a> <a href=\"https:\/\/x.com\/the_matter_labs\/status\/1922088712512454891\" target=\"_blank\" title=\"https:\/\/x.com\/the_matter_labs\/status\/1922088712512454891\">posted<\/a> a fake statement claiming ZKsync was under investigation by the US Securities and Exchange Commission and that the Treasury Department could impose sanctions on the platform.<\/p>\n<p>Matter Labs communications head Lynnette Nolan confirmed to Cointelegraph that the now-deleted X post \u201cis not legit\u201d and both accounts are now \u201cfully back in the control of the team.\u201d<\/p>\n<p>\u201cShoutout to the zksync hackers. Instead of dropping a token and stealing a few bucks they decided to scare the living shit out of onchain degens,\u201d crypto startup g8keep co-founder Harrison Leggio, who goes by \u201cPop Punk,\u201d <a href=\"https:\/\/x.com\/PopPunkOnChain\/status\/1922091384736997862\" target=\"_blank\" title=\"https:\/\/x.com\/PopPunkOnChain\/status\/1922091384736997862\">posted<\/a> to X.<\/p>\n<p><em>Source: <\/em><a href=\"https:\/\/x.com\/PopPunkOnChain\/status\/1922091384736997862\" target=\"null\" title=\"https:\/\/x.com\/PopPunkOnChain\/status\/1922091384736997862\"><em>Harrison Leggio<\/em><\/a><\/p>\n<p>The fake statement was seemingly aimed at crashing the price of the platform\u2019s self-titled token, ZKsync (<a href=\"https:\/\/cointelegraph.com\/zksync-price-index\" target=\"_self\" title=\"https:\/\/cointelegraph.com\/zksync-price-index\">ZK<\/a>), which has fallen around 2% in the last hour amid the X account breach, <a href=\"https:\/\/www.coingecko.com\/en\/coins\/zksync\" target=\"_blank\" title=\"https:\/\/www.coingecko.com\/en\/coins\/zksync\">according<\/a> to CoinGecko.<\/p>\n<p>The SEC has investigated crypto companies in the past, and many of these firms have chosen to publicly disclose when they\u2019ve been investigated by the regulator.<\/p>\n<p>The SEC has stopped <a href=\"https:\/\/cointelegraph.com\/magazine\/sec-crypto-laws-unclear\/\" target=\"_self\" title=\"https:\/\/cointelegraph.com\/magazine\/sec-crypto-laws-unclear\/\">many of its probes<\/a> under the Trump administration, with Crypto.com, Immutable, OpenSea, and RobinHood Crypto, among others, confirming the agency had ended investigations.<\/p>\n<p>ZK is down 6.4% over the last day to trade at around 7 cents, cooling from a nearly 38.5% rally it\u2019s enjoyed over the past week.<\/p>\n<p><em><strong>Related: <\/strong><\/em><a href=\"https:\/\/cointelegraph.com\/news\/sec-hacker-eric-council-sentencing-recommendation\" target=\"null\" title=\"null\"><em><strong>US prosecutors want 2 years for SEC\u00a0X account hacker<\/strong><\/em><\/a><\/p>\n<p>Matter Labs\u2019 Nolan said the firm was looking into how the X accounts were breached, and believed it was via \u201ccompromised delegated accounts,\u201d which allow users limited access to an X account, allowing them to post on its behalf. <\/p>\n<h2>Two hacks in as many months<\/h2>\n<p>It\u2019s the second compromise of ZKsync-controlled platforms since April. <\/p>\n<p>On April 15, an attacker breached the admin account of ZKsync\u2019s airdrop distribution contract and used a function to mint 111 million unclaimed ZK tokens, worth approximately $5 million at the time.<\/p>\n<p>The hack happened amid the platform handing out 17.5% of ZK\u2019s supply to ecosystem participants.<\/p>\n<p>The attacker later <a href=\"https:\/\/cointelegraph.com\/news\/zk-sync-recovers-5-million-stolen-tokens-hacker-accepts-bounty\" target=\"_self\" title=\"https:\/\/cointelegraph.com\/news\/zk-sync-recovers-5-million-stolen-tokens-hacker-accepts-bounty\">returned 90% of the stolen tokens<\/a>, agreeing to keep 10% as a bounty.<\/p>\n<p><em><strong>Magazine: <\/strong><\/em><a href=\"https:\/\/cointelegraph.com\/magazine\/bitcoinos-starknet-adding-smart-contracts-bitcoin-zk-proofs\/\" target=\"null\" title=\"null\"><em><strong>ZK-proofs are bringing smart contracts to Bitcoin \u2014 BitcoinOS and Starknet<\/strong><\/em><\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>The X account of the Ethereum layer 2 network ZKsync and its developer Matter Labs were compromised early on May 13, with hackers falsely claiming the network was being probed by US authorities, among other scam messages. A ZKsync-related X account posted on May 13, confirming the accounts for ZKsync and Matter Labs were compromised, [&hellip;]<\/p>","protected":false},"author":0,"featured_media":20360,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9],"tags":[],"class_list":["post-20359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-finance"],"_links":{"self":[{"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/posts\/20359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/comments?post=20359"}],"version-history":[{"count":0,"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/posts\/20359\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/media\/20360"}],"wp:attachment":[{"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/media?parent=20359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/categories?post=20359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gold.creditcard\/es\/wp-json\/wp\/v2\/tags?post=20359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}