White hat helps recover $1.8M after Foom Cash exploit drains $2.3M
A rapid response by a white hat hacker helped a blockchain protocol recover most of the funds stolen in a $2.26 million exploit, highlighting the growing role of ethical hackers in Web3 incident response.
Foom Cash, a decentralized, anonymous lottery protocol based on zero-knowledge proofs, was exploited for $2.26 million of funds on Friday.
However, the intervention of an ethical hacker helped the protocol recover $1.84 million, or 81% of the stolen funds, Foom Cash announced on Monday.
Pseudonymous white hat hacker, Duha, has triggered and ”identified the vulnerability and moved to secure the funds on Base before malicious actors could strike, while @DecurityHQ handled the rescue operation on Ethereum,” wrote the protocol in a Monday X post.
Source:
Foom Cash
Foom Cash awarded the white hat hacker a $320,000 bounty, while crypto security platform Decurity was awarded a $100,000 security fee.
”By honoring their bug bounty policy, @foomclub_ has proven that they take protocol security seriously and value the researchers helping them,” wrote white hat hacker Duha, in response to the incident.
Related: Suspected insider wallets rack up $1.2M betting on ZachXBT’s Axiom exposé
”Fatal deployment oversight” led to $2.2 million exploit
The $2.2 million exploit occurred due to a ”fatal” deployment mistake, due to a missing command line interface (CLI) in the ”Phase 2 Trusted Setup.”
”In Groth16, if you skip the circuit-specific contribution setup in snarkjs, the parameters γ (gamma) and δ (delta) remain set to the same default value (the G2 generator),” wrote Foom in a Monday X response.
This deployment error enabled the attacker to trick the protocol into ”accepting orged proofs because a placeholder was never randomized.”
Source:
Foom Cash
White hat hackers to the rescue
White hat interventions have become an increasingly common feature of DeFi incident response, particularly as exploiters move quickly to bridge funds across chains or into privacy tools.
In August 2023, white hat hacker and Paradigm researcher Samczsun established a team of ethical hackers known as SEAL (Security Alliance), surpassing 900 hack-related investigations within their first year, Cointelegraph reported.
The initiative came nearly a month after a hacker stole over $230 million from WazirX, an Indian cryptocurrency exchange, in the second-largest cryptocurrency hack of 2024.
SEAL Whitehat Safe Harbor Agreement. Source: Security Alliance
On Feb. 10, 2026, the Ethereum Foundation partnered with SEAL to create a ”Trillion Dollar Security” initiative to combat crypto wallet drainers.
Magazine: Inside a 30,000 phone bot farm stealing crypto airdrops from real users
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Ethena Pay Adds Earn+ Through Aave V4 Lending on Avalanche
DoorDash (DASH.US) Outperforms Nasdaq Amid Tech Stock Selloff! Officially Announces $17 Billion Acquisition of Instacart; Will Grocery Delivery and Retail Advertising Drive a Revaluation of Value?
The complete integration of the two major platforms may enhance their overall competitive and bargaining power in terms of delivery economics, consumer reach, and retail media monetization. Grocery retailers lacking their own delivery networks are bound to face more significant bargaining pressure, while Walmart and Target, which own Spark and Shipt, are relatively more capable of withstanding the impact.
Earnings Preview | A 121x P/E Ratio Gamble: If Palantir (PLTR.US) Guidance Is Not “Impressive Enough”, Its Stock Price May Plummet
Palantir released its Q3 earnings after the market closed on Monday. The market expects revenue of $2.18 billion, an increase of about 85%. The focus is on the raised annual guidance and the growth rate of the commercial business. With its high valuation, there is very little margin for error.
BTIG warns: US stocks have entered "uncharted territory," and gold may further decline to $3,500
The low volatility in the US stock market is actually an illusion created by extreme divergence among sectors, with the internal structure being extremely fragile. BTIG warns that the market urgently needs a panic-induced sharp correction, with the Nasdaq facing at least an 8.5% pullback and the S&P 500 potentially dropping to 7,300 points. Additionally, the semiconductor sector has already broken technical support, the AI sector may be adversely affected by election policies, and both gold and silver have already peaked; the true market bottom is still far from being reached.
Crypto prices
More
