Foom Cash, a decentralized anonymous lottery protocol, suffered a $2.26 million loss due to a security exploit. A white-hat hacker, Duha, managed to recover $1.84 million, approximately 81% of the stolen funds. The breach was caused by a misconfiguration of the Groth16 verifier, allowing attackers to submit forged proofs. Duha quickly identified the vulnerability and secured the funds on the Base chain, while security firm Decurity assisted in recovering funds on Ethereum. As a reward for their efforts, Foom Cash paid Duha a $320,000 bounty and Decurity a $100,000 security fee.