Hacker steals $8.4M from RWA restaking protocol Zoth

Quick Summary:

Unal said that about 30 minutes before the hack was detected, a Zoth contract was upgraded to a malicious version deployed by a suspicious address. “Unlike typical exploits, this method bypassed security mechanisms and gave full control over user funds instantly,” the security professional said. The security professional told Cointelegraph that this type of attack could be prevented by implementing multisig contract upgrades to prevent single-point failures, adding timelocks on upgrades to allow monitoring and placing real-time alerts for admin role changes.

Source: PeckshieldRelated: SMS scammers posing as Binance have an even trickier way to fool victimsHack likely caused by admin privilege leakIn a statement, the Cyvers team said the incident highlights vulnerabilities in smart contract protocols and the need for better security. Cyvers Alerts senior SOC lead Hakan Unal told Cointelegraph that a leak in admin privileges likely caused the hack.

The security firm said that the protocol’s deployer wallet was compromised and that the attacker withdrew over $8.4 million in crypto assets. The blockchain security firm said that within minutes, the stolen assets were converted into the DAI stablecoin and were transferred to a different address. Cyvers added the protocol’s website had been maintained in response to the incident.

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Cointelegraph by Ezra Reguerra

Category: Crypto

Markets: United StatesMali

Topics: Admin Cointelegraph Team Security Platform Blockchain Cyvers Zoth Incident Unal Million

Source Website Secure: Yes (HTTPS)

News Sentiment: Neutral

Fact Checked: Legitimate

Article Type: News Report

Published On: 2025-03-21 @ 11:27:32 (13 hours ago)

News Timezone: GMT -5:00

News Source URL: cointelegraph.com

Language: English

Article Length: 415 words

Reading Time: 3 minutes read

Sentences: 20 lines

Sentence Length: 21 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Coin Telegraph

News ID: 27213646

View Article Analysis

About Coin Telegraph

Main Topics: Crypto

Official Website: cointelegraph.com

Update Frequency: 84 posts per day

Year Established: 2013

Headquarters: United States

News Last Updated: 8 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT -5:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #11

Publisher Details

Frequently Asked Questions