To avoid prolonged legal proceedings, ZKSync’s Security Council issued an on-chain message to the attacker, offering a 10% bounty for returning 90% of the exploited funds.