ZKasino Bridge-to-Earn Rug Pull

On April 20, 2024, the crypto gambling project ZKasino completed one of the higher-profile rug pulls of the year. The project had spent the preceding month running a "bridge-to-earn" campaign — promising users who deposited ETH that their ETH would be returned 1:1 within 30 days plus rewards. More than 8,000 users deposited 10,515 ETH (~$33M at the time). On the launch date, the founders converted the ETH to ZKAS tokens and staked them on Lido for 15 months instead of returning user funds.

What happened

ZKasino's pre-launch marketing emphasised a clean exit promise: deposit ETH to the project's bridge contract, get it back 1:1 in 30 days regardless of whether the user wanted to use the gambling platform. The campaign drew significant capital — 10,515 ETH from over 8,000 distinct addresses — on the basis that even if the project failed, the deposits would be returned.

On the launch day:

1. ZKasino disabled the withdrawal path to ETH from the bridge contract.
2. Converted all bridged ETH to ZKAS tokens at the project's chosen ratio — a forced redemption that depositors had not consented to in the campaign terms.
3. Staked the converted ETH on Lido for a 15-month lock period, putting the funds beyond reach of withdrawal demands.

On-chain investigators identified the action immediately. The crypto community reacted with extensive negative coverage; the project's founders attempted to frame the conversion as a legitimate "launch mechanism" — a framing rejected by essentially every observer.

Aftermath

• Dutch and UAE authorities opened investigations.
• ZKasino's founder was arrested in the United Arab Emirates as part of an international law-enforcement coordination on the case.
• The project's exploit wallet lost approximately $27M in subsequent leveraged-position liquidations as ETH's price declined — meaning even the founders did not retain the full $33M as cash.
• ZKasino initiated a partial refund program, returning 35% of deposits to roughly 2,500 of the 8,000 affected addresses as of November 2025. The bulk of victims remain unreimbursed.

Why it matters

ZKasino is the textbook case for why "your deposits will be returned" is meaningful only when backed by enforceable smart-contract logic, not marketing copy. Every aspect of the campaign — the 30-day timeline, the 1:1 guarantee, the unconditional return — was a representation in tweets, Discord, and blog posts. None of it was encoded in the bridge contract, which simply did what the founders' admin keys told it to do.

The structural lesson, well-documented in the rug-pull research community: trust marketing claims for promises only as far as the on-chain logic enforces them. If the bridge contract is upgradeable and the admin can change the withdrawal terms after launch, the only promise that matters is the one the contract can be modified to break.

The ZKasino arrest is also one of a small number of cases where off-chain law enforcement caught up to the on-chain perpetrators. The combination of UAE residency, public profile, and clear documentary evidence of misrepresentation made the case prosecutable in a way most rug pulls are not.