TechFlow reports that on March 21, according to Cyvers Alerts monitoring, the deployer wallet of RWA lending protocol Zoth appears to have been hacked, resulting in approximately $8.4 million worth of assets being stolen.
The attack occurred about 30 minutes ago. The hacker upgraded Zoth's proxy contract "USD0PPSubVaultUpgradeable" to a malicious contract created by a suspicious address, then drained USD0++ assets valued at $8.4 million. The stolen funds were quickly swapped into DAI stablecoins and transferred to another address.
Currently, Zoth's official website has entered maintenance mode, which is likely directly related to this security incident.




