ZKsync Security Council Report (Aug 2024 - Sept 2025)

To the ZKsync Security Council and Token Assembly,

Thank you for providing the detailed report on the ZKSC’s activities from August 2024 to September 2025. We appreciate the work undertaken to establish the Council and secure the protocol.

However, after a thorough review of the report, we have significant concerns regarding the proposed and approved budget in TPP-6. The current funding model appears disproportionately high relative to the actual operational demands and risks as described in the report itself. We believe a more cost-effective structure is necessary to ensure the long-term sustainability and community trust in the ZKsync ecosystem.

Our concerns are based on the following points from your own report:

  1. The “Emergency Response” workload does not justify the cost.**
    The report details that over 14 months, the ZKSC executed only three genuine emergency upgrades (May x2, August x1), with one being a planned test. While we acknowledge the critical nature of this work, a cost of over $1.1 million USD per year for a body that has been activated for genuine emergencies only three times seems excessive. The value provided, while important, does not appear to scale with the requested compensation.

  2. The “ZIP Approval” process is described as routine, not high-intensity.**
    The report states that the Council reviewed 13 ZIPs and that “in practice, all ZIP approvals met the defined service-level expectations… averaging under 36 hours per approval window.” This describes a steady, manageable workflow, not a high-frequency, high-stress operation that would command premium, 24/7-level compensation for all members.

  3. The budget allocation is heavily skewed toward compensation.**
    With 80% of the budget ($886,400 USD) allocated directly to signer compensation, the financial ask is substantial. For a 12-member council, this translates to an average of over $6,100 per member per month , with some entities receiving up to $8,000/month. Given the described workload, this level of compensation raises questions about market rate alignment and fiscal responsibility to the token holders.

1 Like