Major

Read

Security

Sanctum

<div class="key-points-section">
 <b>Key Points:</b>
 <ul>
  <li>0G Foundation experienced a significant security breach involving a Next.js vulnerability.</li>
  <li>520,010 $0G tokens were stolen, yet core infrastructure and user funds were not affected.</li>
  <li>The incident underscores the importance of robust cloud security protocols.</li>
 </ul>
</div>
<p>A targeted attack on December 11 compromised the 0G Foundation's reward contract, exploiting a vulnerability to steal 520,010 $0G, affecting various services via breached Alibaba Cloud instances.</p>
<p>The incident underscores security flaws in cloud-reliant infrastructure, highlighting potential risks for projects using similar platforms while demonstrating the resilience of core chain infrastructures.</p>
<h2 id="520-010-0g-tokens-stolen-via-next-js-vulnerability">520,010 $0G Tokens Stolen Via Next.js Vulnerability</h2>
<p>0G Foundation reported on <a href="https://twitter.com/0G_Foundation/status/1999781517283737670" rel="noopener noreferrer nofollow">X</a> that on December 11, their <strong>reward contract was compromised</strong>, resulting in the loss of 520,010 $0G tokens. The breach stemmed from a <strong>leaked private key</strong> in <strong>Alibaba Cloud</strong> instances, exploited via a <strong>Next.js vulnerability</strong>. The attacker utilized the emergency withdrawal feature to illegally transfer the assets.</p>
<p>Following the breach, the attacker bridged and dispersed the stolen tokens using Tornado Cash. The attack tactics involved private key acquisition from cloud instances, exploiting the CVE-2025-66478 vulnerability. The breach affected multiple internal services but did not impact the core chain infrastructure. Immediate actions included securing internal networks and services.</p>
<p>Community and industry players have remained vigilant. Although no prominent industry leaders have commented publicly, 0G's timely response and transparency were acknowledged by some exchanges and <a href="https://twitter.com/RootDataCrypto" rel="noopener noreferrer nofollow">data-aggregators</a>.</p>
<h2 id="cloud-security-under-scrutiny-after-69-token-price-drop">Cloud Security Under Scrutiny After 69% Token Price Drop</h2>
<p><strong>Did you know?</strong> This incident highlights the ongoing vulnerabilities associated with remote cloud storage configurations, reminiscent of past breaches leveraging similar vulnerabilities.</p>
<p>As recorded by CoinMarketCap, the <strong>0G token's price</strong> stood at <strong>$0.93</strong> with a market cap of <strong>$198.68 million</strong>. Over the last 90 days, it experienced a decline of <strong>69.02%</strong>, reflecting market volatility. During the last 24 hours, its price increased by <strong>3.01%</strong> amidst considerable trading volume shifts.</p>
<figure class="wp-block-image aligncenter size-large">
 <a href="https://coincu.com/wp-content/uploads/2025/12/0G-daily-chart-on-2033-UTC-on-December-14-2025file.jpeg" rel="noopener noreferrer nofollow"> <img src="https://coincu.com/wp-content/uploads/2025/12/0G-daily-chart-on-2033-UTC-on-December-14-2025file.jpeg" alt="0g-daily-chart-4"> </a>
 <figcaption>
  0G(0G), daily chart, screenshot on CoinMarketCap at 20:33 UTC on December 14, 2025. <em>Source: <a href="https://coinmarketcap.com/currencies/zero-gravity/" rel="noopener noreferrer nofollow">CoinMarketCap</a></em>
 </figcaption>
</figure>
<p><strong>Analysts at Coincu</strong> indicate that the breach underlines the necessity for <strong><a href="https://coincu.com/analysis/us-core-pce-increase-september/" rel="noopener noreferrer nofollow">enhanced cloud security protocols</a></strong>. Historical trends show similar breaches prompting revisions in cloud and token contract security practices, creating potential regulatory challenges for the industry.</p>
<figure class="wp-block-table">
 <table class="has-luminous-vivid-orange-color has-text-color has-link-color has-fixed-layout">
  <tbody>
   <tr>
    <td><em><strong>DISCLAIMER</strong>:&nbsp;The information on<a href="https://coincu.com/" rel="noopener noreferrer nofollow"> this website</a> is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.</em></td>
   </tr>
  </tbody>
 </table>
</figure> <a href="https://coincu.com/uncategorized/0g-foundation-security-breach-520k-tokens-stolen/" rel="noopener noreferrer nofollow">Read original article on coincu.com</a>

0G Foundation Suffers Major Security Breach, Tokens Stolen

Table of Contents

Coincu

Other articles published on Dec 14, 2025

Join our free newsletter for daily crypto updates!