On April 15, ZKsync's security team reported in a social media post that a hacker compromised an admin account that was in control of around $5 million worth of ZK, which were leftover, unclaimed tokens from the ZKsync airdrop.