Research summary
We reject zkSync Era because it has a no-delay censorship tool layered on an emergency path that bypasses all standing delays. Matter Labs’ ZK rollup uses real SNARK validity proofs and a three-hour post-execution delay before withdrawals become actionable, materially faster than an optimistic rollup’s seven-day window and a genuine strength in the mechanism. But L2Beat rates it Stage 0, and its own risk summary says funds can be stolen through a malicious upgrade because the standard 4-day-3-hour to 8-day-3-hour upgrade delay can be bypassed entirely if the EmergencyUpgradeBoard initiates it, with no delay at all. Separately, an operator-controlled TransactionFilterer can block user transactions, including withdrawals, with zero delay. The same censorship-filter pattern already sank Robinhood Chain in this batch. A real, confirmed compromise of a privileged key inside this organization in April 2025 adds to the structural concern.
Observable review triggers
- The TransactionFilterer capability is removed, or is demonstrated to require the same delay and approval path as a standard upgrade
- The EmergencyUpgradeBoard's ability to bypass the standard multi-day delay is removed or itself gated behind a minimum standing delay
- zkSync Era reaches at least Stage 1 per L2Beat's published criteria
- Twelve consecutive months with no privileged-key compromise anywhere in the Matter Labs or ZK Foundation governance or operational infrastructure, counted from the April 2025 incident
Facts on file
- Verdict
- Rejected
- Type
- Other
- Chains examined
- Ethereum
- Reviewed
- Last confirmed