RU

AML check on zkSync Era

zkSync Era is an Ethereum layer-2 ZK rollup that uses Ethereum-style 0x addresses. Here is what matters when you screen a zkSync Era wallet for AML risk.

Address format0x followed by 40 hexadecimal characters (EVM)0xaacdb30ce4809e24ac1f14f09fa9eec8bb46b84aExample for illustration, not a real address.
Note

Withdrawals from zkSync Era to Ethereum pass a security time lock of at least 3 hours, so funds can be in transit for a while. Contract addresses are calculated differently than on Ethereum, so a familiar-looking contract address may not point to the same contract.

Services that check zkSync Era

01EllipticEnterprise platformPrice on requestSupportedNot scored
02TRM LabsEnterprise platformPrice on requestSupportedNot scored
03MistTrackWeb appAPI from $0.20 per checkSupported7.9
04Crystal IntelligenceEnterprise platformPrice on requestNot verifiedNot scored
05MetaSleuthWeb appFree web app · paid plans from $30/monthNot verified7.6
06Merkle ScienceEnterprise platformPrice on requestNot verifiedNot scored

How to check a zkSync Era address

  1. Get the public addressAsk your counterparty for the address they will send from — or copy it from the incoming transaction.
  2. Pick a service that covers zkSync EraChoose one marked “Supported” in the list above. Choose zkSync Era as the network in your AML checker, not just Ethereum: the same-looking 0x address can have a different transaction history on each network.
  3. Run the check and read itDo not assume a contract or token address you know from Ethereum is the same on zkSync Era; ZKsync calculates contract addresses differently, so check the exact address on a zkSync Era block explorer (for ZK, the official contract is 0x5A7d6b2F92C77FAD6CCaBd7EE0624E64907Eaf3E).
A real AML check needs only a public address. Never share a seed phrase or private key.

zkSync Era specifics

  • The same contract code deployed on Ethereum and on zkSync Era can end up at different addresses, because ZKsync uses its own formula to calculate contract addresses (except for contracts run through its EVM Bytecode Interpreter).[1]
  • Withdrawals from zkSync Era to Ethereum pass a security time lock of at least 3 hours (cut from 21 hours), and batching can add another 1-2 hours, so moving funds back to Ethereum is not instant.[2]
  • zkSync Era bundles transactions into batches, creates a cryptographic proof that the whole batch is valid (about an hour) and has it checked by a smart contract on Ethereum; full finality takes around 3 hours.[3]
  • On zkSync Era all accounts, even ordinary wallets, behave like smart contract accounts and can use paymasters, which let a third party sponsor fees or let users pay fees in ERC-20 tokens.[4]
  • ZK is a governance token used to allocate and delegate voting power over ZKsync proposals; its official contract on zkSync Era is 0x5A7d6b2F92C77FAD6CCaBd7EE0624E64907Eaf3E.[5]
  • In April 2025 a compromised admin key for three ZK airdrop distribution contracts was used to mint 111,881,122 ZK tokens (about $5 million at the time); ZKsync says the ZKsync protocol and the ZK token contract were not impacted.[6]
  • ZKsync reports that 90% of the stolen funds were returned on 23 April 2025 under a safe-harbor offer that let the attacker keep a 10% bounty.[7]

Common risks on zkSync Era

Stolen fundsHighCoins taken in hacks of exchanges, protocols or personal wallets.ScamHighMoney taken through fake investments, phishing, impersonation and similar deception.DeFi protocolLowEstablished on-chain lending, swaps and liquidity pools.SanctionsHighAddresses on government sanctions lists or owned by listed entities.

FAQ

How long does a withdrawal from zkSync Era to Ethereum take?

ZKsync's documentation says there is a security time lock of at least 3 hours (reduced from 21 hours), and batching can add another 1-2 hours. The actual time depends on network activity and proof generation.

Was zkSync Era hacked in April 2025?

ZKsync reports that a compromised admin key for three ZK airdrop distribution contracts was used to mint 111,881,122 ZK (about $5 million at the time). ZKsync says the protocol and the ZK token contract were not impacted, and 90% of the funds were returned on 23 April 2025 in exchange for a 10% bounty.

What is the ZK token used for?

According to ZKsync's governance documentation, ZK is a protocol token used to allocate and delegate voting power over ZKsync governance proposals. Its official contract on zkSync Era is 0x5A7d6b2F92C77FAD6CCaBd7EE0624E64907Eaf3E.

How do I check a zkSync Era address for AML risk?

Copy the public address, open one of the services listed above that supports zkSync Era, and run the check. You never need a seed phrase or private key.

What does “Not verified” mean?

The service claims support somewhere — in marketing copy or a third-party page — but its own docs, pricing or FAQ do not list the network. Treat it as unknown.

Sources

  1. ZKsync (Matter Labs) — EVM instructions - ZKsync Docs. Checked 4 Oct 2026.
  2. ZKsync (Matter Labs) — Withdrawal delay - ZKsync Docs. Checked 4 Oct 2026.
  3. ZKsync (Matter Labs) — Finality - ZKsync Docs. Checked 4 Oct 2026.
  4. ZKsync (Matter Labs) — Native AA vs EIP 4337 - ZKsync Docs. Checked 4 Oct 2026.
  5. ZK Nation (ZKsync governance docs) — ZKsync Governance Procedures: Overview (12 Sept 2024). Checked 4 Oct 2026.
  6. ZKsync — Incident Report: Compromised admin key to unclaimed airdrop tokens (25 Apr 2025). Checked 4 Oct 2026.
  7. ZKsync — Incident Report: Compromised admin key to unclaimed airdrop tokens (25 Apr 2025). Checked 4 Oct 2026.