Zoth Protocol
Summary
Zoth Protocol is an Ethereum-based real-world asset (RWA) re-staking and tokenization platform founded in 2023 by Pritam Dutta and Koushik Bhargav. In March 2025 the protocol suffered two separate security incidents within three weeks: an initial $285,000 logic-flaw exploit on March 1 and a far more damaging $8.4 million deployer-key compromise on March 21 that enabled a malicious proxy contract upgrade. The protocol has since launched a user compensation program, engaged Crystal Blockchain BV for fund recovery, and announced a security overhaul backed by a $15 million strategic token commitment from Bolts Capital.
Connected Entities
1 entities · 10 linked investigationsTimeline(11 events)
2025-03-01
First exploit: attacker manipulates Uniswap V3 liquidity pool to exploit LTV logic flaw in mintWithStable(), draining $285,000 from the ZeUSD contract.
Verichains Blog2025-03-14
Attacker funds a preparation wallet with 0.54 ETH via ChangeNOW and deploys a malicious smart contract, suggesting deliberate pre-attack staging.
QuillAudits Hack Analysis2025-03-20
Attacker makes a failed attempt to upgrade the USD0PPSubVaultUpgradeable proxy contract, one day before the successful exploit.
QuillAudits Hack Analysis2025-03-21
08:46 UTC: Attacker uses compromised deployer wallet (0x3604582f...218dca) to call upgradeToAndCall on the USD0PPSubVaultUpgradeable proxy, installing malicious implementation at 0xc89d7894...861f56.
Blockscope Research2025-03-21
08:47 UTC: Attacker withdraws 8,851,750.37 USD0++ tokens (~$8.4M) from the now-controlled vault. Tokens swapped to DAI via CowSwap, then converted to ETH via Uniswap V2.
Blockscope Research2025-03-21
Zoth publicly acknowledges the breach, states it is actively investigating and taking necessary steps.
Rekt News2025-03-21
Asset issuer partners cooperate to freeze or lock approximately 73% of the protocol's TVL.
Rekt News2025-03-25
Stolen funds reported consolidated in attacker wallets; Crystal Blockchain BV engaged for asset tracing. $500,000 public bounty launched via Securr.
CryptoTVPlus / BitcoinEthereumNews2025-04-01
Zoth releases progress update: no significant changes in fund movements observed; tracking and investigation ongoing.
Bitget News2025-04-01
Zoth announces 'Next Chapter' press release: $15M strategic token commitment from Bolts Capital, user compensation program, and phased ZeUSD relaunch with enhanced security measures.
PR NewswireDecision Log
- hash: BGsQfKRY2NTkGYrPpXmP1GsQAVKmqWuNGMaCjGV7pYUG
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:49:54 PM
last updated: 6/1/2026, 5:49:58 PM
avoid.net — verified advice for a post-truth world