2025年5月13日，以太坊2层缩放解决方案zksync发生了严重的安全漏洞

2025年5月13日，在以太坊2层缩放解决方案zksync中发生了严重的安全漏洞。 ZKSYNC及其开发人员物质实验室的官方X帐户被黑客入侵

May 13th of May 2025 saw a major security breach in the Ethereum layer-2 scaling solution ZKsync. The official X accounts of ZKsync and its developer, Matter Labs, were hacked, leading to fake information about an investigation by the U.S. Securities and Exchange Commission (SEC).

2025年5月13日，在以太坊2层缩放解决方案zksync中看到了严重的安全漏洞。 ZKSYNC及其开发商物质实验室的官方X帐户被黑客入侵，导致美国证券交易委员会（SEC）的伪造信息。

The incident unfolded in the early hours of the day as hackers gained control of the X accounts to post misleading remarks. A false report claimed that the SEC was investigating ZKsync and that the U.S. Department of the Treasury might be sanctioning it.

当黑客获得X帐户的控制权以发布误导性言论时，该事件在一天的凌晨进行。一份虚假报告称，SEC正在调查ZKSYNC，美国财政部可能正在制裁。

Coming very quickly after the post, the Developers team of ZKsync issued a warning on their official X account at 00:26 UTC. They notified the users of the breach and said that both accounts were not safe. The team recommended that the community desist from interacting with any post or links from the compromised accounts until they solved the problem. They assured the community they would provide an update after recovering the accounts.

帖子后很快，ZKSYNC的开发人员团队在00:26 UTC上发出了官方X帐户的警告。他们通知用户违规行为，并说两个帐户都不安全。团队建议社区不再与折衷帐户的任何帖子或链接进行互动，直到解决问题为止。他们向社区保证，他们在恢复帐户后将提供更新。

Hackers Target ZK Token Price

黑客目标ZK代币价格

The fake rumor of an SEC investigation appeared to be a move to play with the market. According to data from CoinMarketCap, the price of the ZK token dropped by about 2% in an hour after the fraudulent posts began.

SEC调查的假谣言似乎是与市场一起玩的举动。根据CoinMarketCap的数据，欺诈性职位开始后的一个小时内，ZK代币的价格下降了约2％。

The hackers also included links to a fake airdrop in their posts, which investigators discovered to be a phishing scam designed to steal user information.

黑客还在其帖子中包含了指向伪造的空投的链接，调查人员发现这是旨在窃取用户信息的网络钓鱼骗局。

This marks the second time in less than a month that ZKsync has been hit by a major security compromise. A hack of the network’s wallet in April 2025 led to the theft of ZK tokens worth a total of five million dollars for the company. The constant violations have raised concerns about the security measures adopted by the platform.

这标志着ZKSYNC在不到一个月的时间内第二次受到重大安全妥协的打击。 2025年4月，该网络的钱包被盗窃，导致ZK代币盗窃了该公司的价值五百万美元。不断的违规行为引起了人们对平台采取的安全措施的担忧。

After some time had passed, the team from Matter Labs revealed that hackers most likely breached the X account through compromised delegated accounts. These accounts grant limited access to post on behalf of the main account, allowing the hackers to post without directly hacking the main account. The company is investigating the actual cause of the incident to ensure it does not happen again.

一段时间后，Matter Labs的团队透露，黑客最有可能通过受损的委托帐户违反了X帐户。这些帐户授予有限的代表主帐户访问发布，从而允许黑客发布而无需直接黑客入侵主帐户。该公司正在调查事件的实际原因，以确保不会再次发生。

Community Response and Platform Challenges

社区反应和平台挑战

The ZKsync community has been complaining about the frequent security issues. The platform, which leverages the use of the zero-knowledge proofs technique to improve the scalability of Ethereum, has faced criticism for its management of past events. The April breach, for example, caused a 19% decrease in the price of the ZK token, ultimately ending the day with a 5% loss.

ZKSYNC社区一直抱怨经常出现的安全问题。该平台利用零知识证明技术来提高以太坊的可扩展性，该平台因其对过去事件的管理而面临批评。例如，四月违规行为导致ZK代币的价格下降了19％，最终以5％的损失结束了一天。

The SEC has been known to investigate cryptocurrency platforms in the past, usually resulting in public disclosures by the affected firms. However, the claim posted by the hackers was completely fabricated without any evidence of an actual investigation. Similarly, the U.S. Treasury Department had no record of sanctioning ZKsync.

众所周知，SEC过去会调查加密货币平台，通常导致受影响的公司公开披露。但是，黑客发布的索赔是完全制作的，没有任何实际调查的证据。同样，美国财政部也没有制裁ZKSYNC的记录。

The ZKsync team is still working to recover the compromised accounts. They have reiterated their interest in securing the users and urged the community to remain vigilant against phishing attacks and false announcements.

ZKSYNC团队仍在努力恢复受损的帐户。他们重申了他们对确保用户的兴趣，并敦促社区对网络钓鱼攻击和虚假公告保持警惕。