Zoth, an Ethereum-based real-world asset platform, has suffered an $8.85 million exploit after attackers gained unauthorized access to a private key.
The breach marks the second major security incident for Zoth in a month, highlighting ongoing vulnerabilities in DeFi protocols.
The attacker reportedly compromised the protocol’s deployer wallet, allowing them to upgrade the “USD0PPSubVaultUpgradeable” proxy contract to a contract under their control.
This maneuver helped them to withdraw $8.4 million in Zoth’s USD0++ stablecoin, which was quickly swapped for 8.3 million DAI and moved to an external address.
In response, Zoth has placed its website in maintenance mode and is working with security partners to assess the damage and prevent further exploits.
Proxy contracts, widely used in DeFi for upgradability, introduce a risk when private keys securing them are compromised. The unauthorized upgrade in Zoth’s case demonstrates how attackers can manipulate contract logic to reroute funds without resistance.
This breach follows a March 6 exploit in which Zoth lost $285,000 due to a liquidity pool vulnerability. Repeated security failures raise concerns about the platform’s risk management and could invite regulatory scrutiny.
While Bitcoin has reached new all-time highs, altcoins haven’t even started their bullish cycle. In…
Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure Market expert…
Users across several blockchains can now take non-custodial, crypto-backed loans in just days, the two…
Bitcoin’s price has been anything but steady over the years. Hype, speculation, and investor sentiment…
Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure Crypto analyst…
Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure Bitcoin is…