An RWA (real-world asset) platform built on Ethereum has suffered a malicious attack resulting in a loss of $8.85 million. Zoth, which is a self-described ‘RWAFi’ platform, had already been hacked once this month.

Security experts believe this latest hack happened as the result of a compromised deployer wallet after Zoth had already lost a six-figure sum earlier in March.

🚨ALERT🚨Our system has detected a suspicious transaction involving @zothdotio. It appears that the protocol’s deployer wallet has been compromised. 30 minutes ago, the proxy contract “USD0PPSubVaultUpgradeable” was upgraded to a contract created by a suspicious address. The… — 🚨 Cyvers Alerts 🚨 (@CyversAlerts) March 21, 2025

Cyvers, A Real-Time Security Alert Account, Was The First To Spot The Hack

Earlier today (21 March 2025), a proxy contract on the Zoth platform was upgraded by what security firm Cyvers called a “suspicious address.”

Less than thirty minutes later, $8.85 million worth of the USD0++ stablecoin (the staked version of the USD0 token) was transferred out of the proxy contract and into the hacker’s wallet.

From there, all of the USD0++ was quickly swapped into the DAI stablecoin before being moved to another address. Another web3 security platform, PeckShield, noted that the attacker has since swapped the DAI for 4,223 ETH, worth $8,300,800 at current prices.

Cyvers finished its alert by noting that the Zoth website was down and in maintenance mode, likely in response to the breach.

#PeckShieldAlert @zothdotio hacker has swapped the stolen funds for 4,223 USD pic.twitter.com/OAlYk1TqJg — PeckShieldAlert (@PeckShieldAlert) March 21, 2025

Zoth Makes Statement On The Hack,  Says “Further updates will follow soon”

The Zoth account on X has briefly addressed the incident with a statement.

“Our system has experienced a security breach. We’re actively investigating the incident and taking all necessary steps to resolve it as swiftly as possible,” the statement said.

The company also stated that it is working with its partners to mitigate the impact and fully resolve the issue. “A detailed report with a clear view will be shared once the investigation is complete.”

Meanwhile, Zoth hasn’t yet commented on how the contract’s private key fell into the hands of the attacker. However, it assured its community that a full update will be released once the investigation has been concluded.

Business has not been good for Zoth in March as it is the second hack to hit the RWA/DeFi project in the span of a month. On March 6, Zoth lost $285,000 after attackers exploited a Uniswap V3 liquidity pool.

Zoth’s Disclaimer (Zoth.io)

DISCOVER: 20+ Next Crypto to Explode in 2025

Join The 99Bitcoins News Discord Here For The Latest Market Updates at Discord.