Zoth, a platform specializing in re-staking real-world assets (RWA), has suffered a significant security breach, resulting in the theft of over $8.4 million in crypto.
The hack involved an exploit of the platform’s deployer wallet. Within minutes, the stolen funds were converted into the DAI stablecoin and transferred to an external address.
In response, Zoth quickly entered maintenance mode to investigate the breach. The platform confirmed the hack and assured users that it was actively working with partners to resolve the issue.
A detailed report will be released once the investigation is complete. Meanwhile, PeckShield reported that the stolen funds had been swapped for Ethereum (ETH).
Cyvers indicated that the hack was likely due to a leak in admin privileges, with a suspicious address upgrading the protocol’s smart contract just before the exploit was detected.
This allowed the attacker to bypass security measures and seize control of user funds. To prevent such attacks in the future, experts recommend implementing stronger security protocols, including multisig upgrades and better key management, as well as adding real-time alerts for any changes in admin roles.
Despite these solutions, the risk of similar attacks remains a concern in decentralized finance (DeFi), where privileged roles continue to be targeted.
A major chapter in crypto’s legal reckoning closed this week as Alex Mashinsky, once a prominent name in digital lending, received a 12-year prison sentence.
Former Celsius CEO Alex Mashinsky is asking for a significantly reduced prison sentence ahead of his May 8 sentencing, with his legal team pushing back hard against the U.S. Department of Justice’s call for a 20-year term.
The legal battle against the creators of Samourai Wallet has taken a sharp turn, as defense attorneys accuse federal prosecutors of suppressing a key legal interpretation from the Treasury Department that could dismantle the core of the government’s case.
A decades-long Bitcoin holder has reportedly lost over $300 million in a devastating crypto theft — one of the largest in recent memory.