Leaderboard
914All-time rank
Z
ZEROBASE
Dec 12, 2025
$250K
Lost
$250K
Recovered
$0
Net loss
$250K
Unrecovered0% recovered
Attackers deployed a malicious phishing contract on BSC that impersonated the ZEROBASE frontend, tricking users into authorizing USDT transfers. The fake contract collected token approvals, then drained hundreds of connected wallets of approximately $250K total, with one user losing $123K.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Dec 12, 2025Exploit executed — $250K drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%