Zoth Protocol
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 8 → 49. Problems weighed by who is responsible: incidents the subject suffered −16, concerns that are not fraud −16, problems around the subject, caused by others −2.6; legitimacy credit long-running +4, regulated +5; fact-check adjustments (−20) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -16 |
| Incidents it suffered (e.g. hacks) | -16 |
| Problems around it, caused by others | -2.6 |
| Long-running | +4 |
| Regulated | +5 |
| Sum | 39 |
Score: 49/100 (kept between 0 and 100)
How scoring works →Summary
Zoth Protocol is an Ethereum-based real-world asset (RWA) re-staking and tokenization platform founded in 2023 by Pritam Dutta and Koushik Bhargav. In March 2025 the protocol suffered two separate security incidents within three weeks: an initial $285,000 logic-flaw exploit on March 1 and a far more damaging $8.4 million deployer-key compromise on March 21 that enabled a malicious proxy contract upgrade. The protocol has since launched a user compensation program, engaged Crystal Blockchain BV for fund recovery, and announced a security overhaul backed by a $15 million strategic token commitment from Bolts Capital.
Connected Entities
4 entities · 60 linked investigations- Zoth Protocol→mentioned with→Ethereum(60%)
- Zoth Protocol→mentioned with→ChangeNOW(70%)
- Zoth Protocol→mentioned with→Uniswap(70%)
- ChangeNOW→mentioned with→Ethereum(65%)
- ChangeNOW→mentioned with→Uniswap(60%)
- Uniswap→mentioned with→Ethereum(80%)
Timeline(11 events)
March 2025
First exploit: attacker manipulates Uniswap V3 liquidity pool to exploit LTV logic flaw in mintWithStable(), draining $285,000 from the ZeUSD contract.
Verichains Blog14 March 2025
Attacker funds a preparation wallet with 0.54 ETH via ChangeNOW and deploys a malicious smart contract, suggesting deliberate pre-attack staging.
QuillAudits Hack Analysis20 March 2025
Attacker makes a failed attempt to upgrade the USD0PPSubVaultUpgradeable proxy contract, one day before the successful exploit.
QuillAudits Hack Analysis21 March 2025
08:46 UTC: Attacker uses compromised deployer wallet (0x3604582f...218dca) to call upgradeToAndCall on the USD0PPSubVaultUpgradeable proxy, installing malicious implementation at 0xc89d7894...861f56.
Blockscope Research21 March 2025
08:47 UTC: Attacker withdraws 8,851,750.37 USD0++ tokens (~$8.4M) from the now-controlled vault. Tokens swapped to DAI via CowSwap, then converted to ETH via Uniswap V2.
Blockscope Research21 March 2025
Zoth publicly acknowledges the breach, states it is actively investigating and taking necessary steps.
Rekt News21 March 2025
Asset issuer partners cooperate to freeze or lock approximately 73% of the protocol's TVL.
Rekt News25 March 2025
Stolen funds reported consolidated in attacker wallets; Crystal Blockchain BV engaged for asset tracing. $500,000 public bounty launched via Securr.
CryptoTVPlus / BitcoinEthereumNewsApril 2025
Zoth releases progress update: no significant changes in fund movements observed; tracking and investigation ongoing.
Bitget NewsApril 2025
Zoth announces 'Next Chapter' press release: $15M strategic token commitment from Bolts Capital, user compensation program, and phased ZeUSD relaunch with enhanced security measures.
PR NewswireDecision Log
- slot 455359022 · hash FFupzW8mk9pfHbAYM3oG7RmRa1ZVasvaFTbvHwfCDcmS
- slot 424135747 · hash 7NZnT795Z4EfJVARh22bFry3fQkNaJYj7AAVtvChnK3H
- slot 424135744 · hash 9FiFUH3WP18dCmVDHwo8KgRK7Z8vmAQd9qpjNAUMJvKv
- slot 423876168 · hash 6ewS2ozXtsjcMxMrRsCqgDeEjJRTYecWuduEN7Bg2Bxw
- slot 423876165 · hash 8XZfPRw6AYp9iuHoEYMn2e8NE4xo2Nei1MX922fPtU96
- slot 423871405 · hash Cv4rUrtPexs21uRN2nNgLFrQj63QnP1tERELNBRzaEte
- slot 423871402 · hash 7fqAJLMrJtqrCHkYFcs3ZhhrHshtUUnzmva7pJaP7ipf
- slot 423640548 · hash BGsQfKRY2NTkGYrPpXmP1GsQAVKmqWuNGMaCjGV7pYUG
This investigation is cryptographically anchored to the Solana blockchain (8 decisions). 15 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:49:54 PM
last updated: 10/10/2026, 6:40:35 PM
4 viewsavoid.net — verified advice for a post-truth world