What happened
On December 12, 2025, reports said a BSC phishing contract impersonated the ZEROBASE frontend and induced users to approve USDT spending. The incident affected hundreds of wallets and was reported at more than $240,000 to $250,000 in USDT losses; the sources describe a user-interface attack rather than a core-protocol exploit.
How it happened
- A malicious BSC contract presented itself as the ZEROBASE interface.
- Users who interacted with it were prompted to approve USDT spending.
- The approval enabled the phishing contract to drain USDT from affected wallets.
Protocol details
Classification
Yield Aggregator / Access Control
Protocol Type
Exploit/Phishing
Implementation language
Solidity
Protocol links
Website
@zerobasezk
Evidence
- report @zerobasezk incident report x.com
- report @lookonchain incident report x.com
- analysis DeFiLlama defillama.com
- analysis ZEROBASE front end has been impersonated, and BSC phishing contracts have stolen over $250,000 USDT chaincatcher.com
- analysis ZEROBASE front-end hacked; phishing contract drains $240K+ USDT from 270+ users t.signalplus.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
