0G Foundation has confirmed a targeted attack on its reward contract, resulting in the theft of 520,000 0G tokens, 9.93 ETH, and $4,200 USDT. The attacker exploited an emergency withdrawal function and laundered the stolen assets through Tornado Cash. The breach was traced back to a leaked private key from an Alibaba Cloud instance, granting the attacker control over the reward contract. In response, 0G Foundation has revoked and replaced all compromised private keys, deployed enhanced AliCloud firewalls and security suites, and patched the vulnerabilities. The foundation assured that core blockchain infrastructure and user funds remain secure.