Zoth, a platform specializing in re-staking real-world assets (RWA), has suffered a significant security breach, resulting in the theft of over $8.4 million in crypto.
The hack involved an exploit of the platform’s deployer wallet. Within minutes, the stolen funds were converted into the DAI stablecoin and transferred to an external address.
In response, Zoth quickly entered maintenance mode to investigate the breach. The platform confirmed the hack and assured users that it was actively working with partners to resolve the issue.
A detailed report will be released once the investigation is complete. Meanwhile, PeckShield reported that the stolen funds had been swapped for Ethereum (ETH).
Cyvers indicated that the hack was likely due to a leak in admin privileges, with a suspicious address upgrading the protocol’s smart contract just before the exploit was detected.
This allowed the attacker to bypass security measures and seize control of user funds. To prevent such attacks in the future, experts recommend implementing stronger security protocols, including multisig upgrades and better key management, as well as adding real-time alerts for any changes in admin roles.
Despite these solutions, the risk of similar attacks remains a concern in decentralized finance (DeFi), where privileged roles continue to be targeted.
A recent cyberattack targeting a UK government official’s social media account has highlighted ongoing concerns over digital impersonation and crypto scams.
A former NFT trader is facing potential prison time after admitting to hiding millions in profits from the IRS through undeclared sales of high-value digital assets.
Cybersecurity researchers are sounding the alarm after discovering a new and increasingly sophisticated attack targeting the crypto community.
Australia’s efforts to combat crypto-related fraud have intensified, with the country’s Securities and Investments Commission (ASIC) targeting 95 companies allegedly involved in deceptive schemes like pig butchering scams.