ZBExchange Hack

Reported loss $4.8M
Multi Chain
Other

What happened

An attack was carried out on ZBExchange during which a hacker managed to steal approximately $4.8M.

The ZBExchange provides cryptocurrency exchange services for both cryptos to fiat and crypto to crypto trading pairs.

The hacker took advantage of a vulnerability, which allowed him to steal $ETH and $ERC20 tokens from the ZB Hot Wallet. Since the ZBExchange hot wallet was compromised, it is possible that the hacker managed to obtain a private key, which allowed the tokens to be withdrawn to the scammer address (A). In this transaction, scammer address(A) sends 2k $ETH to scammer address (B):

Tx 0x7402…4f64

some of the stolen funds are located at scammer address (B).

Victim address: Address 0xe019…0a62

Hacker addresses:

  1. Address 0x67c6…1055
  2. Address 0x2644…3fc2

Protocol details

Classification Exchange (DEX) / Key Compromise
Protocol Type Exploit/Other
Affected asset / contract ZB
Protocol links Website @ZBexchange

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.