On May 15, 2025, Zunami Protocol's stablecoin collateral (zunUSD and zunETH) was drained for $500K via the god-mode withdrawStuckToken() function using a compromised admin key. The exploit occurred 7 minutes after the admin role was granted on May 14, suggesting key theft. Stolen funds were laundered through Tornado Cash.

Zunami Protocol has reported a hack in which the collateral for zunUSD and zunETH was stolen, resulting in a loss of approximately $500,000. The attacker has transferred the stolen funds to Tornado Cash.