{"id":18521,"date":"2025-03-21T18:02:11","date_gmt":"2025-03-21T18:02:11","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=18521"},"modified":"2025-03-21T18:02:11","modified_gmt":"2025-03-21T18:02:11","slug":"another-day-another-crypto-hack-rwa-platform-zoth-is-drained-of-8-85-million","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=18521","title":{"rendered":"Another Day Another Crypto Hack: RWA Platform ZOTH Is Drained Of $8.85 Million"},"content":{"rendered":"<div>\n<p>An RWA (real-world asset) platform built on Ethereum has suffered a malicious attack resulting in a loss of $8.85 million. Zoth, which is a self-described <a class=\"general-link\" href=\"https:\/\/zoth.io\/\" target=\"_blank\" rel=\"noopener nofollow\">\u2018RWAFi\u2019 platform<\/a>, had already been hacked once this month.<\/p>\n<p>Security experts believe this latest hack happened as the result of a compromised deployer wallet after Zoth had already lost a six-figure sum earlier in March.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f6a8.png\" alt=\"\ud83d\udea8\" class=\"wp-smiley\" style=\"height: 1em; max-height: 1em;\">ALERT<img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f6a8.png\" alt=\"\ud83d\udea8\" class=\"wp-smiley\" style=\"height: 1em; max-height: 1em;\">Our system has detected a suspicious transaction involving <a href=\"https:\/\/twitter.com\/zothdotio?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">@zothdotio<\/a>. It appears that the protocol&#8217;s deployer wallet has been compromised.<\/p>\n<p>30 minutes ago, the proxy contract &#8220;USD0PPSubVaultUpgradeable&#8221; was upgraded to a contract created by a suspicious address.<br \/>The\u2026 <a href=\"https:\/\/t.co\/3OHmvJYpR5\" target=\"_blank\" rel=\"nofollow\">pic.twitter.com\/3OHmvJYpR5<\/a><\/p>\n<p>\u2014 <img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f6a8.png\" alt=\"\ud83d\udea8\" class=\"wp-smiley\" style=\"height: 1em; max-height: 1em;\"> Cyvers Alerts <img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/1f6a8.png\" alt=\"\ud83d\udea8\" class=\"wp-smiley\" style=\"height: 1em; max-height: 1em;\"> (@CyversAlerts) <a href=\"https:\/\/twitter.com\/CyversAlerts\/status\/1903021017460600885?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">March 21, 2025<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h2>Cyvers, A Real-Time Security Alert Account, Was The First To Spot The Hack<\/h2>\n<p>Earlier today (21 March 2025), a proxy contract on the Zoth platform was upgraded by what security firm Cyvers called a \u201csuspicious address.\u201d<\/p>\n<p>Less than thirty minutes later, $8.85 million worth of the USD0++ stablecoin (the staked version of the USD0 token) was transferred out of the proxy contract and into the hackers wallet.<\/p>\n<p>From there, all of the USD0++ was quickly swapped into the DAI stablecoin before being moved to another address. Another web3 security platform, <a class=\"general-link\" href=\"https:\/\/x.com\/PeckShieldAlert\/status\/1903040662829768994\" target=\"_blank\" rel=\"noopener nofollow\">PeckShield<\/a> noted that the attacker has since swapped the DAI for 4,223 ETH, worth $8,300,800 at current prices.<\/p>\n<p>Cyvers finished its alert by noting that the Zoth website was down and in maintenance mode, likely in response to the breach.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">#PeckShieldAlert<\/a> <a href=\"https:\/\/twitter.com\/zothdotio?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">@zothdotio<\/a> hacker has swapped the stolen funds for 4,223 <a href=\"https:\/\/twitter.com\/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">$ETH<\/a> <a href=\"https:\/\/t.co\/OAlYk1TqJg\" target=\"_blank\" rel=\"nofollow\">pic.twitter.com\/OAlYk1TqJg<\/a><\/p>\n<p>\u2014 PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1903040662829768994?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">March 21, 2025<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p class=\"p1\"><strong>DISCOVER: <a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/next-crypto-to-explode\/\" target=\"_blank\" rel=\"nofollow noopener\">20+ Next Crypto to Explode in 2025\u00a0<\/a><\/strong><\/p>\n<h2>Zoth Makes Statement On The Hack,\u00a0 Says \u201cFurther updates will follow soon\u201d<\/h2>\n<p>The Zoth account on X has briefly addressed the incident with a statement.<\/p>\n<p>\u201cOur system has experienced a security breach. We\u2019re actively investigating the incident and taking all necessary steps to resolve it as swiftly as possible,\u201d the statement said.<\/p>\n<p>The company also said that it is working with its partners to mitigate the impact and fully resolve the issue. \u201cA detailed report with a clear view will be shared once the investigation is complete.\u201d<\/p>\n<p>Meanwhile, Zoth hasn\u2019t yet commented on how the contract\u2019s private key fell into the hands of the attacker. But it assured its community that a full update will be released once it a full investigation has been finished.<\/p>\n<p>Business has not been good for Zoth in March as it is the second hack to hit the RWA\/DeFi project in the space of a month. On March 6, Zoth lost $285,000 after attackers exploited a Uniswap V3 liquidity pool.<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone wp-image-217860 size-full\" src=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03.png\" alt=\"This is the second time this month that RWAFi platform Zoth has been hacked after losing $285,000 to a Uniswap V3 liquidity pool on March 6\" width=\"2828\" height=\"1259\" srcset=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03.png 2048w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03-300x134.png 300w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03-1024x456.png 1024w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03-768x342.png 768w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03-1536x684.png 1536w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/03\/Screenshot-2025-03-21-at-13.31.03-50x22.png 50w\" sizes=\"(max-width: 2828px) 100vw, 2828px\"><\/p>\n<p>(<a class=\"general-link\" href=\"https:\/\/zoth.io\/\" target=\"_blank\" rel=\"noopener nofollow\">Zoth.io<\/a>)<\/p>\n<p class=\"p1\"><strong>DISCOVER:\u00a0<a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/crypto-presales\/\" target=\"_blank\" rel=\"nofollow noopener\">The 12+ Hottest Crypto Presales to Buy Right Now\u00a0<\/a><\/strong><\/p>\n<p><a href=\"https:\/\/discord.gg\/B7Uk6agkqj\" target=\"_blank\" rel=\"nofollow noopener nofollow nofollow nofollow nofollow\"><b>Join The 99Bitcoins News Discord Here For The Latest Market Updates<\/b><\/a><\/p>\n<p>The post <a href=\"https:\/\/99bitcoins.com\/news\/another-day-another-crypto-hack-rwa-platform-zoth-is-drained-of-8-85-million\/\">Another Day Another Crypto Hack: RWA Platform ZOTH Is Drained Of $8.85 Million<\/a> appeared first on <a href=\"https:\/\/99bitcoins.com\/\">99Bitcoins<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>An RWA (real-world asset) platform built on Ethereum has suffered a malicious attack resulting in a loss of $8.85 million. Zoth, which is a self-described \u2018RWAFi\u2019 platform, had already been hacked once this month. Security experts believe this latest hack happened as the result of a compromised deployer wallet after Zoth had already lost a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-18521","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/18521","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18521"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/18521\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18521"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18521"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18521"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}