TechFlow News, March 2: According to Cointelegraph, the decentralized anonymous lottery protocol Foom Cash lost approximately $2.26 million in a security exploit; however, white-hat hackers intervened promptly and recovered $1.84 million—about 81% of the stolen funds.
The incident stemmed from a critical error during Foom Cash’s deployment—specifically, a misconfiguration in the Groth16 verifier—that enabled attackers to submit forged proofs to the protocol. A white-hat hacker operating under the pseudonym “Duha” identified the vulnerability and swiftly secured the funds on Base, while security firm Decurity handled the fund recovery on Ethereum.
In return, Foom Cash paid Duha a $320,000 bounty and awarded Decurity a $100,000 security fee.




