On March 2, 2026, a misconfigured Groth16 verifier allowed attackers to submit forged zero-knowledge proofs and withdraw $2.26M from FOOM Cash. A white-hat recovered $1.84M (81%) of the stolen funds.