ZOTH protocol’s wallet was compromised and the attacker withdrew over $8.5 million in crypto assets
Contents
On March 21, 2025,@ZOTH protocol’s wallet was compromised and the attacker withdrew over $8.5 million in #crypto assets. Our analysis reveals that the #NorthKorean #Lazarus group is behind the attack, based on #blockchain analysis behavioral patterns of the stolen funds.
Lazarus used once again the @THORChain protocol to swap the stolen #ETH to #Bitcoin and #Litecoin, then the stolen funds from the @ZOTH incident were mixed together with Bitcoin #wallets from the @Bybit hack and the @Loopring💙 hack from one year ago.
Lazarus cashed out the stolen funds from the incidents in @Binance ,@Cash App ,@HTX and many other digital currency platforms with weak KYC/AML procedures.
http://Zoth.io hacked #Ethereum wallet:
0x7b0cd0d83565adbb57585d0265b7d15d6d9f60cf
Lazarus #Bitcoin wallets: bc1qkgz47pq8aek79rdg86w9j6jy2apav0a4nsgt9y bc1qq7wcr6ethet9qxtpew82xn5y0czcz644nmqzev bc1qten0xd6zmmy6e3fm35yuczqzq3xemhzc53ufed bc1qh72dqz4h04fc9w9kf8djnqcngk8uvjcz52qhrx bc1qjcksahgz76f2hlqz7yp9n93qaxptyzn84n2hqu
Lazarus #Litecoin wallets:
ltc1qzkqyfnfvhdqyj68unnkw0kg8uc0pz6jfnp87kp
ltc1q9wpa3yg2wkspe5k5x9ra0sqwqeeu6u0e9ga5th
ltc1qxrm0cu9qcanduuvpml6ppckklvh04lydkq4kfn
Contact us for the full investigation report on Lazarus #DeFi #Crypto protocols exploits.
Lazarus used once again the @THORChain protocol to swap the stolen #ETH to #Bitcoin and #Litecoin, then the stolen funds from the @ZOTH incident were mixed together with Bitcoin #wallets from the @Bybit hack and the @Loopring💙 hack from one year ago.
Lazarus cashed out the stolen funds from the incidents in @Binance ,@Cash App ,@HTX and many other digital currency platforms with weak KYC/AML procedures.
http://Zoth.io hacked #Ethereum wallet:
0x7b0cd0d83565adbb57585d0265b7d15d6d9f60cf
Lazarus #Bitcoin wallets: bc1qkgz47pq8aek79rdg86w9j6jy2apav0a4nsgt9y bc1qq7wcr6ethet9qxtpew82xn5y0czcz644nmqzev bc1qten0xd6zmmy6e3fm35yuczqzq3xemhzc53ufed bc1qh72dqz4h04fc9w9kf8djnqcngk8uvjcz52qhrx bc1qjcksahgz76f2hlqz7yp9n93qaxptyzn84n2hqu
Lazarus #Litecoin wallets:
ltc1qzkqyfnfvhdqyj68unnkw0kg8uc0pz6jfnp87kp
ltc1q9wpa3yg2wkspe5k5x9ra0sqwqeeu6u0e9ga5th
ltc1qxrm0cu9qcanduuvpml6ppckklvh04lydkq4kfn
Contact us for the full investigation report on Lazarus #DeFi #Crypto protocols exploits.