🚨 Veil Cash - Loss $5.69K (2026-02-20)

Token: $VEIL @ $0.058
MC: $3.98M

Type: ZK Proof Forgery (Misconfigured Groth16 Verifier)

The Groth16 SNARK verifier deployed at 0x1e65c075989189e607ddafa30fa1a0001c376cfd has delta verification key parameters identical to gamma (deltax1==gammax1, deltax2==gammax2, deltay1==gammay1, deltay2==gammay2). This breaks the soundness of the Groth16 pairing check, allowing anyone to forge valid proofs for arbitrary public inputs without knowledge of the witness. The attacker exploited this to call withdraw() 29 times on the 0.1 ETH privacy pool with fabricated nullifier hashes (0xdead0000 through 0xdead001c), draining 2.9 ETH without ever having deposited.

TX: https://basescan.org/tx/0x5ff6dbc33e77fab8dc086bb9ea3c88f1ba81df198d24ec9fc0c5b50fb1a4a17d
Victim: https://basescan.org/address/0xd3560ef60dd06e27b699372c3da1b741c80b7d90
CoinGecko: https://www.coingecko.com/en/coins/veil-token