ZBExchange Hack

TOTAL LOST $4.8M
Medium Other multi chain

What happened

An attack was carried out on ZBExchange during which a hacker managed to steal approximately $4.8M.

The ZBExchange provides cryptocurrency exchange services for both cryptos to fiat and crypto to crypto trading pairs.

The hacker took advantage of a vulnerability, which allowed him to steal $ETH and $ERC20 tokens from the ZB Hot Wallet. Since the ZBExchange hot wallet was compromised, it is possible that the hacker managed to obtain a private key, which allowed the tokens to be withdrawn to the scammer address (A). In this transaction, scammer address(A) sends 2k $ETH to scammer address (B):

https://etherscan.io/tx/0x740261ce…494f64

some of the stolen funds are located at scammer address (B).

Victim address: https://etherscan.io/address/0xe019d99f…fa0a62

Hacker addresses:

  1. Address
  2. Address

Case & protocol details

Classification Exchange (DEX) / Key Compromise
Protocol Type Exploit/Other
Affected asset / contract ZB
Official Website www.zb.com/en/login
Protocol Twitter/X @ZBexchange

Evidence & learning

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.