21 Mar 2025 (first major event window)
Zoth: Admin Privilege Path and Unauthorized Proxy Upgrade
Zoth: Mar–Apr 2025 security incidents included an admin-privilege path enabling unauthorized proxy upgrade and USD0++ drainage. Zoth published a 10 Apr security incident report.
- Event date
- Incident typeProtocol admin compromise
- Bug classAccess control
- Published
Loss, as sourced
About $8.4M in USD0++ commonly reported. Read Zoth's 10 Apr report for the project's own figures.
Traceability
Primary sources
In brief
Root cause: Per project/security reporting of Zoth's disclosure: compromised admin privileges enabling unauthorized proxy upgrade.
Timeline, as sourced: Mar 2025 incident; Apr 10 Zoth report.
Account, as sourced
Claimed (Zoth) (report (opens in a new tab)): working with partners to mitigate.
Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.