Zoth, a platform specializing in re-staking real-world assets (RWA), has suffered a significant security breach, resulting in the theft of over $8.4 million in crypto.
The hack involved an exploit of the platform’s deployer wallet. Within minutes, the stolen funds were converted into the DAI stablecoin and transferred to an external address.
In response, Zoth quickly entered maintenance mode to investigate the breach. The platform confirmed the hack and assured users that it was actively working with partners to resolve the issue.
A detailed report will be released once the investigation is complete. Meanwhile, PeckShield reported that the stolen funds had been swapped for Ethereum (ETH).
Cyvers indicated that the hack was likely due to a leak in admin privileges, with a suspicious address upgrading the protocol’s smart contract just before the exploit was detected.
This allowed the attacker to bypass security measures and seize control of user funds. To prevent such attacks in the future, experts recommend implementing stronger security protocols, including multisig upgrades and better key management, as well as adding real-time alerts for any changes in admin roles.
Despite these solutions, the risk of similar attacks remains a concern in decentralized finance (DeFi), where privileged roles continue to be targeted.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.
Russia’s attempt to formalize its crypto mining sector is falling short, with most miners opting to remain off the books despite new regulations.
A well-known investor at crypto VC firm Hypersphere has fallen victim to an elaborate phishing attack that wiped out a substantial portion of his personal savings.