Real-world asset (RWA) re-staking protocol Zoth loses $8.4M to hackers

Zoth has lost $8.4M in a hack due to a compromised deployer wallet. Admin privilege leak is being blamed for the attack. The attacker swapped stolen USD0++ to DAI and ETH, evading tracking. Zoth, a real-world asset (RWA) re-staking protocol designed to bridge traditional finance with blockchain technology, has suffered an exploit that drained over […] The post Real-world asset (RWA) re-staking protocol Zoth loses $8.4M to hackers appeared first on CoinJournal.

Mar 21, 2025 - 17:46

Real-world asset (RWA) re-staking protocol Zoth loses $8.4M to hackers

Zoth has lost $8.4M in a hack due to a compromised deployer wallet.
Admin privilege leak is being blamed for the attack.
The attacker swapped stolen USD0++ to DAI and ETH, evading tracking.

Zoth, a real-world asset (RWA) re-staking protocol designed to bridge traditional finance with blockchain technology, has suffered an exploit that drained over $8.4 million in crypto assets.

The incident, flagged by blockchain security firm Cyvers just after midday, sent shockwaves through the ecosystem, prompting Zoth to halt operations and place its website into maintenance mode as the team scrambled to respond.

The breach unfolded with alarming speed and precision, exposing vulnerabilities in Zoth’s infrastructure.

According to Cyvers, the protocol’s deployer wallet—the critical administrative backbone of the system—was compromised. Roughly 30 minutes before the hack was detected, an attacker upgraded the “USD0PPSubVaultUpgradeable” proxy contract to a malicious version, deployed from a suspicious address.