Zerobase Hack

On December 12, 2025, ZEROBASE's frontend was compromised by hackers who deployed a phishing contract on BNB Chain that impersonated the official ZEROBASE interface to trick users into granting USDT approvals, resulting in theft of over $240,000 from 270+ users.

The attack involved a frontend compromise where hackers changed ZEROBASE's user interface to redirect users to a malicious contract on BSC that falsely presented itself as the official ZEROBASE staking platform. When users attempted to interact with what they believed was the legitimate ZEROBASE interface, they were prompted to approve the phishing contract for USDT transfers, granting the attackers permission to drain their wallets. The exploit affected over 270 users, with losses ranging from small amounts to a single victim losing 123,597 USDT.

In response, ZEROBASE implemented an automated detection system that identifies wallets with malicious approvals and prevents further interaction with the platform until users revoke the dangerous permissions through tools like DeFi Shield.

Malicious Contract: https://bscscan.com/address/0x0dd28fd7…152396