Digital Asset
Intelligence
Security Incident · ETH Ecosystem

ZKSwap Contract Vulnerability: $5.00M Reported Loss

·Historical incident record

Incident Overview

ZKSwap’s Ethereum Layer 1 bridge suffered an exploit in which the attacker leveraged its emergency withdrawal mechanism, resulting in a loss of approximately $5 million. Analysis revealed that the component responsible for verifying zero-knowledge proofs had failed to actually perform the verification. This critical oversight allowed the attacker to forge arbitrary withdrawal proofs, effectively bypassing the bridge’s core security guarantees.

Sources & References

Original incident referencehttps://blockaid.io/blog/how-zkswaps-5m-exploit-couldve-been-prevented-with-onchain-monitoring (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Kinto

    Attack methodContract Vulnerability
    Reported loss$ 1,550,000
  2. Incident date
    Target

    Silo Labs

    Attack methodContract Vulnerability
    Reported loss$ 542,000
  3. Incident date
    Target

    Hacken

    Attack methodPrivate Key Leakage
    Reported loss$ 250,000
  4. Incident date
    Target

    Texture

    Attack methodContract Vulnerability
    Reported loss$ 2,200,000
  5. Incident date
    Target

    Synthetix

    Attack methodAccount Compromise
    Reported lossNot disclosed